Static task
static1
Behavioral task
behavioral1
Sample
stager2 - Copy.ps1
Resource
win10-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
stager2 - Copy.ps1
Resource
win7-20230220-en
3 signatures
150 seconds
General
-
Target
stager2 - Copy.ps1
-
Size
269KB
-
MD5
4b76635f581cb007918ca9b37dfe36d7
-
SHA1
eb48436eb7e8d03c88892d57613cc4d706dc9ce7
-
SHA256
a01668a0b87e9350f6c55115132311166694e1bc7fe62f9c8cc25fdda19fcdc4
-
SHA512
08253c2f24f17e7e1347d9c6e6381c52122e31531bb6a5abec2c22a8948b03635d12e320d98b5f0baccb09d04885cc10d509b97f205898b88e8bffacf7feb310
-
SSDEEP
6144:w969J9LmyBCXLaVjEFoNtaH8xq7g0zYt4+XVDw:w9mZvjEaHaMypYHDw
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
exe.dropper
https://battpetfort.ro/Ichth.afm
Signatures
Files
-
stager2 - Copy.ps1