General
- Target 5d42ed2f51516def318de6525b99a6b165b9bfbde4705a428d7be1259b16d2c2
- Size 285KB
- Sample260905-dzpcaadr8y
- SHA256 5d42ed2f51516def318de6525b99a6b165b9bfbde4705a428d7be1259b16d2c2
- MD5 b16c40d2d9ad6998cf3753977570efda
- SHA1 068c08671b5b0901b774dcbc6e5a0cb4b2872718
- SHA512 1f3a88ed71ec1a003e9ce5b86a97844a3c74723524117ac51c6310c5ba431850403188c459ee72bf53544f72b97f358a09396653004dd743aa651fee178890a0
- SSDEEP 6144:rJshNVlR+TCtlrhTWeKpU/cYmD2zK81cJESPx+WK+978FyW38L/dCBYeNfIPfTJ7:YU4cYmD4WzPx+WK+978FyZkrePfMA+up
- TLSH T10354B4D9F78D112E423231AAAD2E12CDB77CD171560458AEFD4D497C24A083D83BAF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
5d42ed2f51516def318de6525b99a6b165b9bfbde4705a428d7be1259b16d2c2.js
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
5d42ed2f51516def318de6525b99a6b165b9bfbde4705a428d7be1259b16d2c2.js
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 5d42ed2f51516def318de6525b99a6b165b9bfbde4705a428d7be1259b16d2c2
- Size 285KB
- SHA256 5d42ed2f51516def318de6525b99a6b165b9bfbde4705a428d7be1259b16d2c2
- MD5 b16c40d2d9ad6998cf3753977570efda
- SHA1 068c08671b5b0901b774dcbc6e5a0cb4b2872718
- SHA512 1f3a88ed71ec1a003e9ce5b86a97844a3c74723524117ac51c6310c5ba431850403188c459ee72bf53544f72b97f358a09396653004dd743aa651fee178890a0
- SSDEEP 6144:rJshNVlR+TCtlrhTWeKpU/cYmD2zK81cJESPx+WK+978FyW38L/dCBYeNfIPfTJ7:YU4cYmD4WzPx+WK+978FyZkrePfMA+up
- TLSH T10354B4D9F78D112E423231AAAD2E12CDB77CD171560458AEFD4D497C24A083D83BAF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.