Resubmissions

25-06-2024 17:23

240625-vyh8basgnh 10

25-06-2024 17:22

240625-vxt87asgld 3

General

  • Target

    5a14ccdeec314bc1d3555a4ebed84cd5a08eb283cbb35260b2127f8a99dd8aca

  • Size

    18.5MB

  • Sample

    240625-vyh8basgnh

  • MD5

    5603a1437b62d81a29ba02e26fb4157d

  • SHA1

    9a8cb2dbfb52bb7c7b9b0bef17b74a383f73fab2

  • SHA256

    5a14ccdeec314bc1d3555a4ebed84cd5a08eb283cbb35260b2127f8a99dd8aca

  • SHA512

    7531f1e1d252ae1c24952a4d7ac6a0a4d73aadaf5195091fd16ddec8e27ed4bcdc154bacb76a562baaca3031c083e0cdbee534a7bac4dc5d8d4ef1aa8eb31730

  • SSDEEP

    49152:hmPm08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDMmPm08dPXWR4ba/JC:Cc43m8c43m8c43m8c43ml

Malware Config

Targets

    • Target

      5a14ccdeec314bc1d3555a4ebed84cd5a08eb283cbb35260b2127f8a99dd8aca

    • Size

      18.5MB

    • MD5

      5603a1437b62d81a29ba02e26fb4157d

    • SHA1

      9a8cb2dbfb52bb7c7b9b0bef17b74a383f73fab2

    • SHA256

      5a14ccdeec314bc1d3555a4ebed84cd5a08eb283cbb35260b2127f8a99dd8aca

    • SHA512

      7531f1e1d252ae1c24952a4d7ac6a0a4d73aadaf5195091fd16ddec8e27ed4bcdc154bacb76a562baaca3031c083e0cdbee534a7bac4dc5d8d4ef1aa8eb31730

    • SSDEEP

      49152:hmPm08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDMmPm08dPXWR4ba/JC:Cc43m8c43m8c43m8c43ml

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Execution

Command and Scripting Interpreter

2
T1059

PowerShell

1
T1059.001

JavaScript

1
T1059.007

Discovery

System Information Discovery

1
T1082

Query Registry

1
T1012

Tasks