216.73.217.22

Dissecting GootLoader With Node.js

· Published 04/07/2024 10:30 · Modified 04/07/2024 10:53

Export JSON

Essential information

Published
04/07/2024 10:30
Modified
04/07/2024 10:53
Tags
2024-07-04 anti-analysis deobfuscation evasion gootloader javascript
Related entities
2 observables, 1 intrusion sets (apt), 8 techniques (mitre), 1 malware

Description

This article demonstrates how to circumvent techniques employed by malware while utilizing Node.js debugging in Visual Studio Code. files employ an technique that can pose a formidable challenge for sandboxes attempting to analyze the malware. The malware creators leveraged time-consuming loops with arrays of functions to deliberately delay the execution of malicious code, effectively implementing a sleep period to obfuscate 's malicious nature. Through continuous collaboration and knowledge sharing, we can enhance our ability to detect, analyze, and develop effective countermeasures against such malicious software.

External references