p1[.]ps1[.]ps1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
p1.ps1.ps1
Size 490B
Sample221005-wljtrafah9
SHA256 91f9c3bb1be812f281e5d04b275b8680d16c9b911c8fbfe325615baef88eaa08
MD5 f6db1c37da19d115882c90d9f89aad89
SHA1 44f5bc1e89f70d0ae1fa19b12eac27ce841e1ce9
SHA512 0ed20cc40abd98ff9c87e41cdf2cdba302e83450fd038f33b9d98f0e6267e16200b2f3ba95fe5ddb8aee49237f37ebd0d6c4e7f36389157ac5b7f8c01ed8e118
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Language

ps1

Deobfuscated

Source

URLs

exe.dropper
http://20.54.249.195:8080/Updater.exe
exe.dropper
http://20.54.249.195:8080/IMPOSSIBLE_CHATEAU.bin

Signatures

File Explorer

p1.ps1.ps1

.ps1 490B

p1.ps1.ps1

SHA256 91f9c3bb1be812f281e5d04b275b8680d16c9b911c8fbfe325615baef88eaa08
MD5 f6db1c37da19d115882c90d9f89aad89
SHA1 44f5bc1e89f70d0ae1fa19b12eac27ce841e1ce9
SHA512 0ed20cc40abd98ff9c87e41cdf2cdba302e83450fd038f33b9d98f0e6267e16200b2f3ba95fe5ddb8aee49237f37ebd0d6c4e7f36389157ac5b7f8c01ed8e118
MD5 SHA1 SHA512