General

  • Target

    62f9f243314b8c1188c31bbc411da6e2.unknown

  • Size

    106KB

  • Sample

    240106-mqabfafdb2

  • MD5

    62f9f243314b8c1188c31bbc411da6e2

  • SHA1

    a2bb4cf6e563ab7ba1f0435280aeccc3975a8242

  • SHA256

    4d02eade2a3839f2999ffea08e5959fcaab72c825a2cbf42861510e267454573

  • SHA512

    42c7d982bb257c06f526e1a3758f36a5cd68059b16ac4d2811351b0eb05fbcba1e2a421fd1da70285e50d7683506ebc39e796e58a38c5c16ddc98cc1e4b0e7ce

  • SSDEEP

    3072:AMz4v+b/i3h9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzG:rsv+zix9Ry9RuXqW4SzUHmLKeMMU7Gw3

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      62f9f243314b8c1188c31bbc411da6e2.unknown

    • Size

      106KB

    • MD5

      62f9f243314b8c1188c31bbc411da6e2

    • SHA1

      a2bb4cf6e563ab7ba1f0435280aeccc3975a8242

    • SHA256

      4d02eade2a3839f2999ffea08e5959fcaab72c825a2cbf42861510e267454573

    • SHA512

      42c7d982bb257c06f526e1a3758f36a5cd68059b16ac4d2811351b0eb05fbcba1e2a421fd1da70285e50d7683506ebc39e796e58a38c5c16ddc98cc1e4b0e7ce

    • SSDEEP

      3072:AMz4v+b/i3h9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzG:rsv+zix9Ry9RuXqW4SzUHmLKeMMU7Gw3

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks