General

  • Target

    0a5f146c81635008e5e5bcbc306bf948

  • Size

    122KB

  • Sample

    231230-b3dc3sehg8

  • MD5

    0a5f146c81635008e5e5bcbc306bf948

  • SHA1

    791b257960acfbe8f6a6a4c9d22f6f5565dfa59d

  • SHA256

    6d5c60fd2abb87e1d66df1ae63b7cbe4777793ad8792d2f88dacb17c76a1d825

  • SHA512

    9f306fedb4ed979f6cf23340efdcd0e0a2d5a78406ac9f56db30033071f14c583595bd25d1cea4badf467f568dd30bf80deeb9983cbb54d3adbda593b76b730a

  • SSDEEP

    3072:7aEU9znDo+ifdAkI3339Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8o:7aEU9TDo+ifq9Ry9RuXqW4SzUHmLKeMK

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      0a5f146c81635008e5e5bcbc306bf948

    • Size

      122KB

    • MD5

      0a5f146c81635008e5e5bcbc306bf948

    • SHA1

      791b257960acfbe8f6a6a4c9d22f6f5565dfa59d

    • SHA256

      6d5c60fd2abb87e1d66df1ae63b7cbe4777793ad8792d2f88dacb17c76a1d825

    • SHA512

      9f306fedb4ed979f6cf23340efdcd0e0a2d5a78406ac9f56db30033071f14c583595bd25d1cea4badf467f568dd30bf80deeb9983cbb54d3adbda593b76b730a

    • SSDEEP

      3072:7aEU9znDo+ifdAkI3339Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8o:7aEU9TDo+ifq9Ry9RuXqW4SzUHmLKeMK

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks