General
- Target ps2.ps1
- Size 255B
- Sample220405-m7d1yshbdl
- SHA256 85c4da9717a561be04c1d74cf98d01a08e821223d300f1b8600490a9a0a4e445
- MD5 a3307974b3ee394343341f8ca2debf5f
- SHA1 ebc459c6f6fbde977505f84fca3f3fbe17500cb9
- SHA512 b82eedc206648091353798716184ad70ab481271672478b09398b70f4a8f7a9434f4802d65fa874c7e21a7863d961b485f7ea4de4dc3a2b04db9036c4bbe32ac
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ps2.ps1
Resource
win7-20220331-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ps2.ps1
Resource
win10v2004-20220331-en
0 signatures
0 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
http://loginline.top/index.php
Targets
-
- Target ps2.ps1
- Size 255B
- SHA256 85c4da9717a561be04c1d74cf98d01a08e821223d300f1b8600490a9a0a4e445
- MD5 a3307974b3ee394343341f8ca2debf5f
- SHA1 ebc459c6f6fbde977505f84fca3f3fbe17500cb9
- SHA512 b82eedc206648091353798716184ad70ab481271672478b09398b70f4a8f7a9434f4802d65fa874c7e21a7863d961b485f7ea4de4dc3a2b04db9036c4bbe32ac
- MD5 SHA1 SHA512
Score10/10-
Blocklisted process makes network request