General

  • Target

    1dd6deb7802512dc4dcccdd2fd4983fb.unknown

  • Size

    92KB

  • Sample

    240103-smzptahhg9

  • MD5

    1dd6deb7802512dc4dcccdd2fd4983fb

  • SHA1

    e5b3b483d00e07a232cd4cd9085f153b09aeb079

  • SHA256

    70138d15e673f5d5564ab689a50a3f6f73b43ffa410deef929b065fe1d81232c

  • SHA512

    aec0efcdcdeaa9f9d739da2bc8164cbd958e04b8ae934118c7235a934752e8c8f0392b3603bc3cf578396ea92a1e56e23f6f0f8bc5a5cbf17903a94fdc30e8b2

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/ob:59Ry98guHVBqqg2bcruzUHmLKeMMU7GN

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      1dd6deb7802512dc4dcccdd2fd4983fb.unknown

    • Size

      92KB

    • MD5

      1dd6deb7802512dc4dcccdd2fd4983fb

    • SHA1

      e5b3b483d00e07a232cd4cd9085f153b09aeb079

    • SHA256

      70138d15e673f5d5564ab689a50a3f6f73b43ffa410deef929b065fe1d81232c

    • SHA512

      aec0efcdcdeaa9f9d739da2bc8164cbd958e04b8ae934118c7235a934752e8c8f0392b3603bc3cf578396ea92a1e56e23f6f0f8bc5a5cbf17903a94fdc30e8b2

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/ob:59Ry98guHVBqqg2bcruzUHmLKeMMU7GN

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks