Static task
static1
Behavioral task
behavioral1
Sample
oui.ps1
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
oui.ps1
Resource
win10v2004-20230220-en
General
-
Target
oui.ps1
-
Size
4KB
-
MD5
2ecab995dc986b809a34607c1637aaab
-
SHA1
71d9e6aefd42744407e72dd67b1f0e844e2e3685
-
SHA256
bf07cccf18fff803ac1fe3cf301fd43bf76a0993dc07c691f4ab9ed40d3d809c
-
SHA512
8a0e9530f519acb95bade7dc50384f9f680070a3941a6e630f02524408c9f0f2e2b9c9aea11a11eca817afd3c095851ad02e45f8281740dbc4c12767cb87ef5e
-
SSDEEP
96:4GqZr5YZc2w0VIwNRXwuCnbbYni13K9EO4s0XQViFOUz:4GO5YZ9fV9NRXwvYDl4sWZFP
Malware Config
Extracted
https://github.com/witnessstrong/OneDriveUpdater/raw/main/install.ps1
https://github.com/witnessstrong/OneDriveUpdater/raw/main/OneDriveStandaloneUpdater.exe
https://github.com/witnessstrong/OneDriveUpdater/raw/main/version.dll
https://github.com/witnessstrong/OneDriveUpdater/raw/main/verslon.dll
Signatures
Files
-
oui.ps1