Overview

overview

10

Static

static

1

iY.js

windows7-x64

10

iY.js

windows10-2004-x64

10

Resubmissions

21/03/2023, 07:01

230321-hs7x9shb5410

21/03/2023, 06:49

230321-hlmczsbb4t10

Sharing

Copy URL Twitter E-mail

General

  • Target
    iY.js
  • Size 53KB
  • Sample230321-hlmczsbb4t
  • SHA256 6239e4bf81f1fded401ed955f1f870bf1b51a1fd1916a8c7629295b3a84604a6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Language

  • ps1

Source
URLs
  • exe.dropper

    https://discountlandllc.com/uUbH/cW2ebg
  • exe.dropper

    https://kingzunlimited.com/VvAmv/mUioIIipJTQQ
  • exe.dropper

    https://smeolbd.com/ntaUX/3MDVH9cdpva7
  • exe.dropper

    https://odwazig.nl/xNV7x/uZMaE4mcum
  • exe.dropper

    https://sobanaze.com/cJn7i/0f8a0t81i
  • exe.dropper

    https://canadianused.com/euSgOJA/QcQ6SSc
  • exe.dropper

    https://getcash2surveys.com/0HFE0G/NYoKEHjWnhRr
  • exe.dropper

    https://onestopsilkscreeners.ca/o6g4bt1/CC8ely1q

Targets

    • Target
      iY.js
    • Size 53KB
    • SHA256 6239e4bf81f1fded401ed955f1f870bf1b51a1fd1916a8c7629295b3a84604a6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks