General

  • Target

    476327a6916ad18442be964bfafce692

  • Size

    77KB

  • Sample

    240106-2yc5mabcc3

  • MD5

    476327a6916ad18442be964bfafce692

  • SHA1

    5379e25269aefde49d3940c6e452b07f412087cd

  • SHA256

    4be66468fcca9a127cfabb5efeef53ed9854b92e7b81d3503785b55476a4e826

  • SHA512

    e938f0e01f0c8c07b8938200e4d4aead303957c21423b7f352dedc1974d4bd110b125e3118928aa14695433bb259a7129467ddcdc05872ee966ee1be486e808d

  • SSDEEP

    1536:/yxVS9gGLIiaw9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8GG:n9h0iv9Ry98guHVBqqg2bcruzUHmLKee

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      476327a6916ad18442be964bfafce692

    • Size

      77KB

    • MD5

      476327a6916ad18442be964bfafce692

    • SHA1

      5379e25269aefde49d3940c6e452b07f412087cd

    • SHA256

      4be66468fcca9a127cfabb5efeef53ed9854b92e7b81d3503785b55476a4e826

    • SHA512

      e938f0e01f0c8c07b8938200e4d4aead303957c21423b7f352dedc1974d4bd110b125e3118928aa14695433bb259a7129467ddcdc05872ee966ee1be486e808d

    • SSDEEP

      1536:/yxVS9gGLIiaw9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8GG:n9h0iv9Ry98guHVBqqg2bcruzUHmLKee

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks