Overview

overview

10

Static

static

certificat_117.hta

windows7_x64

10

certificat_117.hta

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    certificat_117.zip
  • Size 1KB
  • Sample220318-jnn52aghbq
  • SHA256 d44b8b1266d3fbf8620ecfec0040c6aedff89c1e922fc5d5b341401cbc449c1e
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    http://onlinerlines.top/index.php

Targets

    • Target
      certificat_117.hta
    • Size 4KB
    • SHA256 d3a8fba8466cfd14eb55ad3b85669d9ea151d2b6436f14b65adfaad0d7b25d04
    • MD5 SHA1 SHA512
    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks