General

  • Target

    11f327e374b50e8e0774e78690b52beb

  • Size

    91KB

  • Sample

    231224-zmeszaedf3

  • MD5

    11f327e374b50e8e0774e78690b52beb

  • SHA1

    6940c66e8eb6773864cae1e60e540b6eba4013d4

  • SHA256

    4a5671b2a2aef45f20ef1893e7fa9181d8733f6595ee4fc3cac7a9e731665f74

  • SHA512

    dd527536a07efda55ae6b1e0301d0f6561cdf55a7f74407e9055fa5975a6790be81445e14f4226879a56ebc5841db6cb93dd42064b04c7601df6452b3ede0633

  • SSDEEP

    1536:OZstvPEuRlpgP9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8GG:OWvPEECP9Ry98guHVBqqg2bcruzUHmLC

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      11f327e374b50e8e0774e78690b52beb

    • Size

      91KB

    • MD5

      11f327e374b50e8e0774e78690b52beb

    • SHA1

      6940c66e8eb6773864cae1e60e540b6eba4013d4

    • SHA256

      4a5671b2a2aef45f20ef1893e7fa9181d8733f6595ee4fc3cac7a9e731665f74

    • SHA512

      dd527536a07efda55ae6b1e0301d0f6561cdf55a7f74407e9055fa5975a6790be81445e14f4226879a56ebc5841db6cb93dd42064b04c7601df6452b3ede0633

    • SSDEEP

      1536:OZstvPEuRlpgP9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8GG:OWvPEECP9Ry98guHVBqqg2bcruzUHmLC

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks