Overview

overview

10

Static

static

1

48a38f40d8...e0a.js

windows7-x64

10

48a38f40d8...e0a.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    48a38f40d82099f3d444ab4300297e0a

  • Size

    106KB

  • Sample

    240107-lnzb4sadbm

  • MD5

    48a38f40d82099f3d444ab4300297e0a

  • SHA1

    197d3651f295c852b7afe11717f63171b67261f8

  • SHA256

    d857c3089e2068f6ad45f40fa53d62d220700819547e82c3a293b58e16659794

  • SHA512

    a9f1367cc6cec3ce6744026c9610677df01ebba84041df1c097f96d153f846828f0cf4d094d7a0a1a2c6ca5e1bd00cc585b013c59bde5eb5af4c7d78c352d528

  • SSDEEP

    3072:dj9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzIvt/4g5eaf:d9Ry9RuXqW4SzUHmLKeMMU7GwWBPwVG+

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      48a38f40d82099f3d444ab4300297e0a

    • Size

      106KB

    • MD5

      48a38f40d82099f3d444ab4300297e0a

    • SHA1

      197d3651f295c852b7afe11717f63171b67261f8

    • SHA256

      d857c3089e2068f6ad45f40fa53d62d220700819547e82c3a293b58e16659794

    • SHA512

      a9f1367cc6cec3ce6744026c9610677df01ebba84041df1c097f96d153f846828f0cf4d094d7a0a1a2c6ca5e1bd00cc585b013c59bde5eb5af4c7d78c352d528

    • SSDEEP

      3072:dj9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzIvt/4g5eaf:d9Ry9RuXqW4SzUHmLKeMMU7GwWBPwVG+

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks