General

  • Target

    54d417fb770d81fbc9b17e03bd4fbc85

  • Size

    91KB

  • Sample

    231226-e9yt5sgbd3

  • MD5

    54d417fb770d81fbc9b17e03bd4fbc85

  • SHA1

    a4a0f129626bc79b4b05f118eb2ec16ea9a3f682

  • SHA256

    d831e0b8f8c5e0f377bbd6174b1f686f635d20767f98079b21b4fbba54a6aac8

  • SHA512

    88047a32ad512f7deac977a9e0683a6e422f6789b18404239467dafb2d88c594f057b4994ea0e2cd6a06cc09573e259ee877d855c86dd2cbdfdc6edb579d12e5

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/o8:59Ry98guHVBqqg2bcruzUHmLKeMMU7Gy

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      54d417fb770d81fbc9b17e03bd4fbc85

    • Size

      91KB

    • MD5

      54d417fb770d81fbc9b17e03bd4fbc85

    • SHA1

      a4a0f129626bc79b4b05f118eb2ec16ea9a3f682

    • SHA256

      d831e0b8f8c5e0f377bbd6174b1f686f635d20767f98079b21b4fbba54a6aac8

    • SHA512

      88047a32ad512f7deac977a9e0683a6e422f6789b18404239467dafb2d88c594f057b4994ea0e2cd6a06cc09573e259ee877d855c86dd2cbdfdc6edb579d12e5

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/o8:59Ry98guHVBqqg2bcruzUHmLKeMMU7Gy

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks