General

  • Target

    ca7c9e748dcf1c2b205732a15cb1a2af

  • Size

    513KB

  • Sample

    240315-e3mtasgb9x

  • MD5

    ca7c9e748dcf1c2b205732a15cb1a2af

  • SHA1

    40ac9ef24e637a813287f32387928619a4c79cd1

  • SHA256

    45c7d9ea06e9ad0fe9ca96d928bc7e64103a58b6766b3116977a4ff60703bee4

  • SHA512

    56690524318d72ebf2af8cf02535d9feb151a000bbf0697a564773fac5aed8bcda6594321dfd1322e6de9a7f0c0e1bcb17cc229b5f6ae3b302880aecff467b00

  • SSDEEP

    12288:2kpu3BdD+cHjQnKBam64VWA6yoD/rnCFzPW6y7c4BWLYEYEb9iHW41:tA6yoDu0J7c4MLIKw91

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://grupotopbem.com.br/ashkere.php

Targets

    • Target

      ca7c9e748dcf1c2b205732a15cb1a2af

    • Size

      513KB

    • MD5

      ca7c9e748dcf1c2b205732a15cb1a2af

    • SHA1

      40ac9ef24e637a813287f32387928619a4c79cd1

    • SHA256

      45c7d9ea06e9ad0fe9ca96d928bc7e64103a58b6766b3116977a4ff60703bee4

    • SHA512

      56690524318d72ebf2af8cf02535d9feb151a000bbf0697a564773fac5aed8bcda6594321dfd1322e6de9a7f0c0e1bcb17cc229b5f6ae3b302880aecff467b00

    • SSDEEP

      12288:2kpu3BdD+cHjQnKBam64VWA6yoD/rnCFzPW6y7c4BWLYEYEb9iHW41:tA6yoDu0J7c4MLIKw91

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks