Overview

overview

10

Static

static

149.js

windows7_x64

10

149.js

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    149.zip
  • Size 283KB
  • Sample210803-dgr5dk31r2
  • SHA256 239705523bd939e2bcf3055a0bb22a9ed5d2cb41a0e4bec848c8ef607e3f381f
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    http://grupotopbem.com.br/ashkere.php

Targets

    • Target
      149.js
    • Size 477KB
    • SHA256 d8583c959b46d947318779b7f0d827fd3d72d04a927ad9ac1b6d658d2e966436
    • MD5 SHA1 SHA512
    Score
    10/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks