Static task
static1
Behavioral task
behavioral1
Sample
down.ps1
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
down.ps1
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
down.ps1
-
Size
454B
-
MD5
52e0740269ed779e80e4e14673e56c82
-
SHA1
5fcb41d539e360f56de4a176dacc93f5d2dc729f
-
SHA256
ce91b25495792bab27166e715e7fc9b644a95eff19f1eaebc107de79848f640e
-
SHA512
7c37534f48c58cc875ea2a3ee9a8b7c8d7aace95246bb9f1f6f90a17cf47611c3526b760bd39db72c8a9554ee0c9b22e01ffbbb53abf070ca8609b5d1ecbd9b1
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
ps1.dropper
http://" + 192.168.1.106 + ":" + 8000 + "/amsi.ps1
ps1.dropper
http://" + 192.168.1.106 + ":" + 8000 + "/new_night.ps1
Signatures
Files
-
down.ps1