General

  • Target

    97119b6a31b4b2a63245ba8a7cc6ea70

  • Size

    90KB

  • Sample

    240212-ns9dzsea58

  • MD5

    97119b6a31b4b2a63245ba8a7cc6ea70

  • SHA1

    38c10ac0c0b2499eef862933bdbb3454f36b2e9d

  • SHA256

    4e84f80ca52540a020bd3061cd1cec4fb0309e95d49d7465d0f78f2156afc4c3

  • SHA512

    87181ca760e12fff885d75640d6115c15b6fa8249304c4d060421e82d61608480bf75222a8e2b016bab7f79d9f9699cb0be6f679fa38a5170bf1e4d9bf12a950

  • SSDEEP

    1536:dtE3R0bsGRBjaO76BNut9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9v:d2hLGRHsy9Ry98guHVBqqg2bcruzUHm2

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      97119b6a31b4b2a63245ba8a7cc6ea70

    • Size

      90KB

    • MD5

      97119b6a31b4b2a63245ba8a7cc6ea70

    • SHA1

      38c10ac0c0b2499eef862933bdbb3454f36b2e9d

    • SHA256

      4e84f80ca52540a020bd3061cd1cec4fb0309e95d49d7465d0f78f2156afc4c3

    • SHA512

      87181ca760e12fff885d75640d6115c15b6fa8249304c4d060421e82d61608480bf75222a8e2b016bab7f79d9f9699cb0be6f679fa38a5170bf1e4d9bf12a950

    • SSDEEP

      1536:dtE3R0bsGRBjaO76BNut9Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9v:d2hLGRHsy9Ry98guHVBqqg2bcruzUHm2

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks