Overview

overview

10

Static

static

1

8e888435ca...f68.js

windows7-x64

10

8e888435ca...f68.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e888435ca116690085c31ea0b437f68

  • Size

    74KB

  • Sample

    240204-h1mx3acbd3

  • MD5

    8e888435ca116690085c31ea0b437f68

  • SHA1

    c77e72595ffbcb5d5ebb2182840923435cbcc185

  • SHA256

    8e687852c62a064c2ca93dd2892c0f960c896a578ab3132ef98a0f3863c1d29e

  • SHA512

    fdc92de49bf5c2a0f794996fbcc98f40b82ff0daff09f7b0bc8f6f869692ecb0d047df2bd5969772929b528e5d7eb8e024a4ab6a7ca54be52ae05152d5c70e1c

  • SSDEEP

    1536:LvQRpKlH9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzG:sRpKlH9Ry98guHVBqqg2bcruzUHmLKee

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      8e888435ca116690085c31ea0b437f68

    • Size

      74KB

    • MD5

      8e888435ca116690085c31ea0b437f68

    • SHA1

      c77e72595ffbcb5d5ebb2182840923435cbcc185

    • SHA256

      8e687852c62a064c2ca93dd2892c0f960c896a578ab3132ef98a0f3863c1d29e

    • SHA512

      fdc92de49bf5c2a0f794996fbcc98f40b82ff0daff09f7b0bc8f6f869692ecb0d047df2bd5969772929b528e5d7eb8e024a4ab6a7ca54be52ae05152d5c70e1c

    • SSDEEP

      1536:LvQRpKlH9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzG:sRpKlH9Ry98guHVBqqg2bcruzUHmLKee

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks