General

  • Target

    1362d19ccf491d1563757cdf5a512b3c2e2e1c01c4b2c116f6321460c9488e41

  • Size

    97KB

  • Sample

    231125-dpwcvagb84

  • MD5

    8a82f737a5afe3683ad8810ce566de86

  • SHA1

    5ee47c958160fa475e677463b8ac6340e1b18b64

  • SHA256

    1362d19ccf491d1563757cdf5a512b3c2e2e1c01c4b2c116f6321460c9488e41

  • SHA512

    b25a42321a79c5ebf63084cd022f4e3c78209c61a699609352e876eb90fd4c34d58bcfcbf0aaf0421b1b286a3ccba5cf3b013764d3f03c811063ce02914af18c

  • SSDEEP

    1536:Q88888GvoKwtjIa/ehqSH+L888881888882X88888EIJ88888PC88888z88888Y1:2voKMIa2ISH+X4X

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://uploaddeimagens.com.br/images/004/666/676/original/vbs.jpg?1700182879

exe.dropper

https://uploaddeimagens.com.br/images/004/666/676/original/vbs.jpg?1700182879

Targets

    • Target

      1362d19ccf491d1563757cdf5a512b3c2e2e1c01c4b2c116f6321460c9488e41

    • Size

      97KB

    • MD5

      8a82f737a5afe3683ad8810ce566de86

    • SHA1

      5ee47c958160fa475e677463b8ac6340e1b18b64

    • SHA256

      1362d19ccf491d1563757cdf5a512b3c2e2e1c01c4b2c116f6321460c9488e41

    • SHA512

      b25a42321a79c5ebf63084cd022f4e3c78209c61a699609352e876eb90fd4c34d58bcfcbf0aaf0421b1b286a3ccba5cf3b013764d3f03c811063ce02914af18c

    • SSDEEP

      1536:Q88888GvoKwtjIa/ehqSH+L888881888882X88888EIJ88888PC88888z88888Y1:2voKMIa2ISH+X4X

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks