Overview

overview

10

Static

static

yhhljgxudq...db.dll

windows7_x64

1

yhhljgxudq...db.dll

windows10-2004_x64

8

yhhljgxudq...UI.dll

windows7_x64

1

yhhljgxudq...UI.dll

windows10-2004_x64

8

yhhljgxudq...og.ps1

windows7_x64

1

yhhljgxudq...og.ps1

windows10-2004_x64

1

yhhljgxudq...ss.exe

windows7_x64

3

yhhljgxudq...ss.exe

windows10-2004_x64

8

yhhljgxudq...e3.dll

windows7_x64

3

yhhljgxudq...e3.dll

windows10-2004_x64

10

yhhljgxudq...it.exe

windows7_x64

1

yhhljgxudq...it.exe

windows10-2004_x64

8

Analysis

  • max time kernel
    8s
  • max time network
    81s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    01-02-2022 20:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    yhhljgxudqeyowcinyde44154280653/log.ps1

  • Size

    73KB

  • MD5

    50e4ca3324fa01c3292ce82924a7400e

  • SHA1

    7adfd487807bc2802bbb48d4d225c0f51a893e27

  • SHA256

    fb6dd22ce7cb0a866a8810d30c4706eccfc58c6ff0599a1fc62cc2138f1378b2

  • SHA512

    1c74763b9347bb953726fb419a4b88c24d4944a4de44b499f677ce2f3fe1b08e9eb9902c66d2b6785b1387263acedc834668421ff680312f1c8ae90f34020822

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\yhhljgxudqeyowcinyde44154280653\log.ps1
    1⤵
      PID:1452

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads