Static task
static1
Behavioral task
behavioral1
Sample
oui.ps1
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
oui.ps1
Resource
win10v2004-20230220-en
General
-
Target
oui.ps1
-
Size
1KB
-
MD5
e4e39f56ff8d9b008b04f726bb51aed2
-
SHA1
f810bbaa4ce56f32d0b8d6d7af508a9587ba1538
-
SHA256
9621c8923e0f953c6f01c646d05e235fe7e227edb61b643528ccf26dd40562d0
-
SHA512
95a5690e4bfc09bc95a26206416c77510d5ecc2f81fd891aa105599785ab4a6affa29bb2c12a7c9dae4bd17838ec4c9fc98848d68caf9d79f552e8a9070cd7bb
Malware Config
Extracted
https://web.archive.org/web/20230315194218/https://github.com/witnessstrong/OneDriveUpdater/raw/main/install.ps1
https://web.archive.org/web/20230315194218/https://github.com/witnessstrong/OneDriveUpdater/raw/main/OneDriveStandaloneUpdater.exe
https://web.archive.org/web/20230315194218/https://github.com/witnessstrong/OneDriveUpdater/raw/main/version.dll
https://web.archive.org/web/20230315194218/https://github.com/witnessstrong/OneDriveUpdater/raw/main/verslon.dll
Signatures
Files
-
oui.ps1.ps1