Static task
static1
Behavioral task
behavioral1
Sample
p1.ps1
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
p1.ps1
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
p1.ps1.ps1
-
Size
490B
-
MD5
f6db1c37da19d115882c90d9f89aad89
-
SHA1
44f5bc1e89f70d0ae1fa19b12eac27ce841e1ce9
-
SHA256
91f9c3bb1be812f281e5d04b275b8680d16c9b911c8fbfe325615baef88eaa08
-
SHA512
0ed20cc40abd98ff9c87e41cdf2cdba302e83450fd038f33b9d98f0e6267e16200b2f3ba95fe5ddb8aee49237f37ebd0d6c4e7f36389157ac5b7f8c01ed8e118
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
exe.dropper
http://20.54.249.195:8080/Updater.exe
exe.dropper
http://20.54.249.195:8080/IMPOSSIBLE_CHATEAU.bin
Signatures
Files
-
p1.ps1.ps1.ps1