Overview

overview

10

Static

static

1236.ps1

windows7_x64

1

1236.ps1

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1236.ps1

  • Size

    177KB

  • Sample

    220603-qrjhaabfdr

  • MD5

    0336381c76595f013baed58abebec38c

  • SHA1

    46b35dc1fe0eca4dc45b35db87d5f6220456df17

  • SHA256

    90f7051bb59f9ee7dbfee8a1fc9882dbba383fbe1e647eff0466830d2ce71ce2

  • SHA512

    d6a3c890d9d6981b8b001b747b1b9b319a4d34e293eaf4d8a9f10b16b5a2af0d94c01fff3b532aa90200561957d2386f89c32eafed4613dda005bc2a6923c7f6

Score
10/10
doublebackbackdoor

Malware Config

Targets

    • Target

      1236.ps1

    • Size

      177KB

    • MD5

      0336381c76595f013baed58abebec38c

    • SHA1

      46b35dc1fe0eca4dc45b35db87d5f6220456df17

    • SHA256

      90f7051bb59f9ee7dbfee8a1fc9882dbba383fbe1e647eff0466830d2ce71ce2

    • SHA512

      d6a3c890d9d6981b8b001b747b1b9b319a4d34e293eaf4d8a9f10b16b5a2af0d94c01fff3b532aa90200561957d2386f89c32eafed4613dda005bc2a6923c7f6

    Score
    10/10
    doublebackbackdoor

    • DoubleBack

      DoubleBack is a modular backdoor first seen in December 2020.

      backdoordoubleback

    • DoubleBack x64 Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks