Overview

overview

10

Static

static

10

script.ps1

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    script.ps1

  • Size

    1KB

  • MD5

    f1073d28937f9859e060fd2efaf83c49

  • SHA1

    2d8a0079467d6523479f00208ea0e4bfd377a307

  • SHA256

    92ecfa07fabdd1259979a414f315995ef903818c562bb07b03bc34dfca6aac55

  • SHA512

    9d494d098b79af1948825e4638a3c65580d3da70a8a766c4049e545ed47119b53e0e8799d9a72f533bf33f68f3cb3364d40234a10f35aa67aa93c9d09a84f852

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://download.wetransfer.com/eugv/928e42f210cbb8ac8499d8020537f54c20230322210959/df99b4e3d8f87c65fa2a6bcfc3b0848baa260caf/wannierCrypt.zip?token=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2Nzk1MTk0MTYsImV4cCI6MTY3OTUyMDAxNiwidW5pcXVlIjoiOTI4ZTQyZjIxMGNiYjhhYzg0OTlkODAyMDUzN2Y1NGMyMDIzMDMyMjIxMDk1OSIsImZpbGVuYW1lIjoid2FubmllckNyeXB0LnppcCIsIndheWJpbGxfdXJsIjoiaHR0cDovL3N0b3JtLnByb2R1Y3Quc3ZjLmNsdXN0ZXIubG9jYWw6OTI5Mi9hcGkvd2F5YmlsbHMvOWM0MGVhMzA4ZDZlNDgxNzYyNjI4ZGNmZjVmNmEzMGQxMWIxYThhNzY4ZjFiNzRhMTJjMTBlMmJmMWUwIiwiZmluZ2VycHJpbnQiOiJkZjk5YjRlM2Q4Zjg3YzY1ZmEyYTZiY2ZjM2IwODQ4YmFhMjYwY2FmIiwiY2FsbGJhY2siOiJ7XCJmb3JtZGF0YVwiOntcImFjdGlvblwiOlwiaHR0cDovL2Zyb250ZW5kLnNlcnZpY2UuZXUtd2VzdC0xLndldHJhbnNmZXIubmV0L3dlYmhvb2tzL2JhY2tlbmRcIn0sXCJmb3JtXCI6e1widHJhbnNmZXJfaWRcIjpcIjkyOGU0MmYyMTBjYmI4YWM4NDk5ZDgwMjA1MzdmNTRjMjAyMzAzMjIyMTA5NTlcIixcImRvd25sb2FkX2lkXCI6MTgxNjczMzU3MDB9fSJ9.xDeuod-DlS2o8y4-dTmCfax_007W7jSGuZfpn_nnMQA&cf=y

Signatures

Files

  • script.ps1
    .ps1