General

  • Target

    105d3e5738461fc9264399630f1b06ac

  • Size

    136KB

  • Sample

    231224-y21tbaagg9

  • MD5

    105d3e5738461fc9264399630f1b06ac

  • SHA1

    53befad5d1bbbf1cb6893f2162a775758f9231ee

  • SHA256

    381a5f54a0938c0d931478e744ee7233c70f639fbaf0f1799be54a0149735bf2

  • SHA512

    d4fdd5c48bd2af9c52705aa63d4ecd66312cbde00d470e0645dd5998d8b82c1d2e2c5a9b4c19cdc19471223fa7f4bd55aa2f75db38a7e253ded6854ed72bf0a0

  • SSDEEP

    3072:i2p4TdQHfEoRzvwH9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8V:iEP0H9Ry9RuXqW4SzUHmLKeMMU7GwWB6

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      105d3e5738461fc9264399630f1b06ac

    • Size

      136KB

    • MD5

      105d3e5738461fc9264399630f1b06ac

    • SHA1

      53befad5d1bbbf1cb6893f2162a775758f9231ee

    • SHA256

      381a5f54a0938c0d931478e744ee7233c70f639fbaf0f1799be54a0149735bf2

    • SHA512

      d4fdd5c48bd2af9c52705aa63d4ecd66312cbde00d470e0645dd5998d8b82c1d2e2c5a9b4c19cdc19471223fa7f4bd55aa2f75db38a7e253ded6854ed72bf0a0

    • SSDEEP

      3072:i2p4TdQHfEoRzvwH9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8V:iEP0H9Ry9RuXqW4SzUHmLKeMMU7GwWB6

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks