Overview

overview

10

Static

static

10

f1fc72ca61...48.ps1

windows7-x64

1

f1fc72ca61...48.ps1

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1fc72ca619ee382fda2446414612148.bin

  • Size

    1KB

  • Sample

    230324-cxp1csbf78

  • MD5

    f1fc72ca619ee382fda2446414612148

  • SHA1

    ee758895d23c2bdb6878f9014445079df9e2b451

  • SHA256

    f46ae50d4a2ea185b6fd09bcf3fd7a0b79b2e4fc66e1ab23e110716b45bc32da

  • SHA512

    83edf4ee142e860469e6dfd545d6a86eab5a283670d66a8d0b7102b20374d4ed4668ce7ab25754654ad1d8accf09587f53b618a3180ca983f6883f48817b7da6

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://download.wetransfer.com/eugv/928e42f210cbb8ac8499d8020537f54c20230322210959/df99b4e3d8f87c65fa2a6bcfc3b0848baa260caf/wannierCrypt.zip?token=eyJhbGciOiJIUzI1NiJ9.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.xDeuod-DlS2o8y4-dTmCfax_007W7jSGuZfpn_nnMQA&cf=y

Targets

    • Target

      f1fc72ca619ee382fda2446414612148.bin

    • Size

      1KB

    • MD5

      f1fc72ca619ee382fda2446414612148

    • SHA1

      ee758895d23c2bdb6878f9014445079df9e2b451

    • SHA256

      f46ae50d4a2ea185b6fd09bcf3fd7a0b79b2e4fc66e1ab23e110716b45bc32da

    • SHA512

      83edf4ee142e860469e6dfd545d6a86eab5a283670d66a8d0b7102b20374d4ed4668ce7ab25754654ad1d8accf09587f53b618a3180ca983f6883f48817b7da6

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks