General
-
Target
https://www.albuspsikoloji.com.tr/2025%20inquiry.js
-
Sample
250204-klpt8asrfj
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.albuspsikoloji.com.tr/2025%20inquiry.js
Resource
win10v2004-20241007-en
27 signatures
150 seconds
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
ps1.dropper
https://res.cloudinary.com/daxwua63y/image/upload/v1738334533/alcb4htolzvfhzzufqh5.jpg
exe.dropper
https://res.cloudinary.com/daxwua63y/image/upload/v1738334533/alcb4htolzvfhzzufqh5.jpg
Targets
-
-
Target
https://www.albuspsikoloji.com.tr/2025%20inquiry.js
-
Obj3ctivity family
-
Obj3ctivity, PXRECVOWEIWOEI
Obj3ctivity aka PXRECVOWEIWOEI is an infostealer written in C#.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-