General

  • Target

    c12f901675a3d8ca4a21aae3711c0333

  • Size

    329KB

  • Sample

    240311-v3wn7shd9z

  • MD5

    c12f901675a3d8ca4a21aae3711c0333

  • SHA1

    995b758005f5afee95adb09fe78831735e574697

  • SHA256

    1a18842c816a2282b5f1a073adfa56000a2a0f1c2db43ccdccc2e1f1d710cf3c

  • SHA512

    3d6e73ff304220f2831ed69a291cfd319ee165e44d75d76be2a399b2ca23f320dd6b66f7ee34e4c6bde4a117b403f91de99e80147a6bfd390ffdc58443202dc1

  • SSDEEP

    6144:0Xt/0Dlm7NeXofOZOaq37Qr9i6FDimNSohw/MxAXMrWRWqAbJiL85zJSXX:0Xt8Dw/OXDbi8xIP8rWRCll5O

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://jolantagraban.pl/log/57843441668980/dll/assistant.php

Targets

    • Target

      c12f901675a3d8ca4a21aae3711c0333

    • Size

      329KB

    • MD5

      c12f901675a3d8ca4a21aae3711c0333

    • SHA1

      995b758005f5afee95adb09fe78831735e574697

    • SHA256

      1a18842c816a2282b5f1a073adfa56000a2a0f1c2db43ccdccc2e1f1d710cf3c

    • SHA512

      3d6e73ff304220f2831ed69a291cfd319ee165e44d75d76be2a399b2ca23f320dd6b66f7ee34e4c6bde4a117b403f91de99e80147a6bfd390ffdc58443202dc1

    • SSDEEP

      6144:0Xt/0Dlm7NeXofOZOaq37Qr9i6FDimNSohw/MxAXMrWRWqAbJiL85zJSXX:0Xt8Dw/OXDbi8xIP8rWRCll5O

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks