General

  • Target

    2014E8859CF4B5532E9C7CC8A6FC0E253BAA1EE1.js

  • Size

    106KB

  • Sample

    230326-v7ftjshd72

  • MD5

    fde8277305bcb78badd2b11cd65050a8

  • SHA1

    2014e8859cf4b5532e9c7cc8a6fc0e253baa1ee1

  • SHA256

    06262ffe1a329e668738ca278fc8bd1af36d057302aa314303fe41e9d66bb7f6

  • SHA512

    e00eeacf0ceacc5cad04ff84f60ccf6421aa17dbce0f0df7e5da1a8df3949d6fb2bc3bd8105a93227942085528fdb235690d264842f6e262962f73a35971da40

  • SSDEEP

    3072:hssesJCwnqYS84YKrirKuSwH4CjK+hVt+2NsDP:hssTJCwn07rirKM4CjK/ksDP

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://planetedev.info/33eCr9/K2Xf9fPE2PUB

exe.dropper

https://arteappassionato.com/OwT/j4gvS

exe.dropper

https://altrcorp.com/Vsb/gQ9nXrp

exe.dropper

https://vleisbook.com/yCpoeN/s3q7ijyN2xU1

exe.dropper

https://pamjaudio.com/CLy/rCx6s2Gs

exe.dropper

https://advancedsportnutrition.com/Z8y9g/qAlDov

exe.dropper

https://mollysschools.com/x8d/57ivsZVn6Y

Targets

    • Target

      2014E8859CF4B5532E9C7CC8A6FC0E253BAA1EE1.js

    • Size

      106KB

    • MD5

      fde8277305bcb78badd2b11cd65050a8

    • SHA1

      2014e8859cf4b5532e9c7cc8a6fc0e253baa1ee1

    • SHA256

      06262ffe1a329e668738ca278fc8bd1af36d057302aa314303fe41e9d66bb7f6

    • SHA512

      e00eeacf0ceacc5cad04ff84f60ccf6421aa17dbce0f0df7e5da1a8df3949d6fb2bc3bd8105a93227942085528fdb235690d264842f6e262962f73a35971da40

    • SSDEEP

      3072:hssesJCwnqYS84YKrirKuSwH4CjK+hVt+2NsDP:hssTJCwn07rirKM4CjK/ksDP

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks