Overview

overview

10

Static

static

1

7417-4966073.js

windows7-x64

10

7417-4966073.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a0adf6b4ce4009cb1708746789a76c9

  • Size

    296KB

  • Sample

    231224-3lkvdafbh5

  • MD5

    1a0adf6b4ce4009cb1708746789a76c9

  • SHA1

    1c24f1046734c4f77f21b995e6c1156a0e8f2be8

  • SHA256

    0ba6c9755e3d19e06bef73dc17e0f38b879c0a209aa372d6334ba06f79698690

  • SHA512

    f514186fd51b051ccdb94ce1d42bf38fd2eef61daeb7ea98e34af7191db4647b65550f27dee73fe86f6d2109cc671db62d56fc3926e634bc13013735375d1ec6

  • SSDEEP

    6144:v81TN4x6UR+6qk9Q9IUYDKeaMXRNZ8huGRlje+5GvIB0DESn+0Coh:E1xqc629IlDPhznGHy+YTxCoh

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://www.musanegra.it/wpreveniu.php

Targets

    • Target

      7417-4966073.js

    • Size

      359KB

    • MD5

      166148818f8e15930e4c30f8459ed5e7

    • SHA1

      93747227be5e8b85fd7e6f7bb9b0a328a920d985

    • SHA256

      22ed16ed1f92309c17f817d51c7f8275bab443db12b18fd155b6f7b738e83e07

    • SHA512

      7cb05f2ec3bb17d14ed3812768e061e66548410fa52891e26626e02397c5c398555549bb80d3728e33ffbcd8fa03e17770d5fc9ebc14f21c5d2232e7ceb14aa9

    • SSDEEP

      6144:wnmYuEbKxWJ8czDK2e2LbklGk8HPKUeIgbrAGHW3XvxsHpxJ:s8c3teZlGkoKrAGQJUR

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks