General

  • Target

    125e297a26e0005845023254b1d93c07

  • Size

    79KB

  • Sample

    231225-khlcmadbe2

  • MD5

    125e297a26e0005845023254b1d93c07

  • SHA1

    9494d391135322e3cfea015b761993788740a7be

  • SHA256

    22aa7f3480c78ab3baf58aefd3d767cfb682438a82cb7954dd1f106c90bb65a4

  • SHA512

    f6c51b92f6613b5f0252ba273b0358162fb7752f7684109eecc2e5c87c05eb395ea893704cffc96c100f0eb323d06f68002376c16736761c43a082e8ff763902

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/ou:59Ry98guHVBqqg2bcruzUHmLKeMMU7G4

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      125e297a26e0005845023254b1d93c07

    • Size

      79KB

    • MD5

      125e297a26e0005845023254b1d93c07

    • SHA1

      9494d391135322e3cfea015b761993788740a7be

    • SHA256

      22aa7f3480c78ab3baf58aefd3d767cfb682438a82cb7954dd1f106c90bb65a4

    • SHA512

      f6c51b92f6613b5f0252ba273b0358162fb7752f7684109eecc2e5c87c05eb395ea893704cffc96c100f0eb323d06f68002376c16736761c43a082e8ff763902

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/ou:59Ry98guHVBqqg2bcruzUHmLKeMMU7G4

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks