General

  • Target

    16b90591eae642738815db7b0793e39e

  • Size

    65KB

  • Sample

    231230-m6xfxaedgj

  • MD5

    16b90591eae642738815db7b0793e39e

  • SHA1

    17c512496c4fb54d46eb19ded51d2a7495d41751

  • SHA256

    71b2c64ccc0591ae6d21179d32e486b7a175b0f62bebeea866fcbb0ac5001fd7

  • SHA512

    9caedb8c6949f000cb7a803b8616ba2bf38c8a8a67616fdc8cca8c476f0fd9adbdc1923ae905e233107f6266130a1b0966b1f3481ad8995ad4cd6bc4682a4587

  • SSDEEP

    1536:aTnL/zQ9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIx:afzQ9Ry98guHVBqqg2bcruzUHmLKeMMe

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      16b90591eae642738815db7b0793e39e

    • Size

      65KB

    • MD5

      16b90591eae642738815db7b0793e39e

    • SHA1

      17c512496c4fb54d46eb19ded51d2a7495d41751

    • SHA256

      71b2c64ccc0591ae6d21179d32e486b7a175b0f62bebeea866fcbb0ac5001fd7

    • SHA512

      9caedb8c6949f000cb7a803b8616ba2bf38c8a8a67616fdc8cca8c476f0fd9adbdc1923ae905e233107f6266130a1b0966b1f3481ad8995ad4cd6bc4682a4587

    • SSDEEP

      1536:aTnL/zQ9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIx:afzQ9Ry98guHVBqqg2bcruzUHmLKeMMe

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks