Static task
static1
Behavioral task
behavioral1
Sample
378f209030f8bf87e51c7d83f0d6cfe40647f4ff16f372b08a7ae64daa676b29.ps1
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
378f209030f8bf87e51c7d83f0d6cfe40647f4ff16f372b08a7ae64daa676b29.ps1
Resource
win10v2004-20220812-en
8 signatures
150 seconds
General
-
Target
21ba9027a42adcda9c8094f2e57c87b7.bin
-
Size
2KB
-
MD5
e8a43032b0e795696495a5cb931aad9c
-
SHA1
30942ab2c3226e7cef6480d0ca61d79f16681aa4
-
SHA256
fb65038836d7c5bc0e74bd4356277344c23a71d795075b06c99c7b613f182a05
-
SHA512
a2ab780460d962fe0af4aaa267b839583ea5ea48015feda141b1e0be667e815d2d5823763bbe6dfbf488e36567f02a40b9c9038b21906f832c737468099d1181
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
exe.dropper
http://vincentnicotra.com/b.php?u=r/
Signatures
Files
-
21ba9027a42adcda9c8094f2e57c87b7.bin.zip
Password: infected
-
378f209030f8bf87e51c7d83f0d6cfe40647f4ff16f372b08a7ae64daa676b29.ps1.ps1