General

  • Target

    297104ef0763685af0b0418bf51011ad

  • Size

    118KB

  • Sample

    231231-ftpf7saefq

  • MD5

    297104ef0763685af0b0418bf51011ad

  • SHA1

    79bbcfd5b4bb470ce1cf400a1e60efa148e46509

  • SHA256

    a941ca3dd7849195b3c724f0ed4a9df91025cd6bd502505522690179b30ed941

  • SHA512

    cc76fdb934613a63d3ab078b23a2160425094c7e6b45fc625bffcb7a1d5d5a14661f7e413eabae8560731b71f62a728ff1d2f929d594de937fab18206ecdee80

  • SSDEEP

    3072:Z8m0x9ns/Og9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzS:W3ng9Ry9RuXqW4SzUHmLKeMMU7GwWBPu

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      297104ef0763685af0b0418bf51011ad

    • Size

      118KB

    • MD5

      297104ef0763685af0b0418bf51011ad

    • SHA1

      79bbcfd5b4bb470ce1cf400a1e60efa148e46509

    • SHA256

      a941ca3dd7849195b3c724f0ed4a9df91025cd6bd502505522690179b30ed941

    • SHA512

      cc76fdb934613a63d3ab078b23a2160425094c7e6b45fc625bffcb7a1d5d5a14661f7e413eabae8560731b71f62a728ff1d2f929d594de937fab18206ecdee80

    • SSDEEP

      3072:Z8m0x9ns/Og9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzS:W3ng9Ry9RuXqW4SzUHmLKeMMU7GwWBPu

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks