Overview

overview

10

Static

static

1

iY.js

windows7-x64

10

iY.js

windows10-2004-x64

10

Resubmissions

21-03-2023 07:01

230321-hs7x9shb54 10

21-03-2023 06:49

230321-hlmczsbb4t 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    iY.js

  • Size

    53KB

  • Sample

    230321-hs7x9shb54

  • MD5

    36621d51e958d1e3154d1d6e81b8e93a

  • SHA1

    9ce87c16dc0cad0e0fcf709edb8b0a635e82432e

  • SHA256

    6239e4bf81f1fded401ed955f1f870bf1b51a1fd1916a8c7629295b3a84604a6

  • SHA512

    a22da574a2d155fd66bbcc1b409cc8164785c336a3d87611af12ff57f426f2e9cdde3befc57efeea879e7bbde2ff96e2a264fd6e29a7914d251476270f847e5a

  • SSDEEP

    768:wraoPeWohY+es08VMrE0Uytgk2Z9l7dabRGrpIHFLgkExBpxjwLsz/ERHAQMxqG:wramJows0XrEhobYqL6xB3MLsz/NFxx

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://discountlandllc.com/uUbH/cW2ebg
exe.dropper

https://kingzunlimited.com/VvAmv/mUioIIipJTQQ
exe.dropper

https://smeolbd.com/ntaUX/3MDVH9cdpva7
exe.dropper

https://odwazig.nl/xNV7x/uZMaE4mcum
exe.dropper

https://sobanaze.com/cJn7i/0f8a0t81i
exe.dropper

https://canadianused.com/euSgOJA/QcQ6SSc
exe.dropper

https://getcash2surveys.com/0HFE0G/NYoKEHjWnhRr
exe.dropper

https://onestopsilkscreeners.ca/o6g4bt1/CC8ely1q

Targets

    • Target

      iY.js

    • Size

      53KB

    • MD5

      36621d51e958d1e3154d1d6e81b8e93a

    • SHA1

      9ce87c16dc0cad0e0fcf709edb8b0a635e82432e

    • SHA256

      6239e4bf81f1fded401ed955f1f870bf1b51a1fd1916a8c7629295b3a84604a6

    • SHA512

      a22da574a2d155fd66bbcc1b409cc8164785c336a3d87611af12ff57f426f2e9cdde3befc57efeea879e7bbde2ff96e2a264fd6e29a7914d251476270f847e5a

    • SSDEEP

      768:wraoPeWohY+es08VMrE0Uytgk2Z9l7dabRGrpIHFLgkExBpxjwLsz/ERHAQMxqG:wramJows0XrEhobYqL6xB3MLsz/NFxx

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks