General

  • Target

    down.ps1

  • Size

    454B

  • MD5

    52e0740269ed779e80e4e14673e56c82

  • SHA1

    5fcb41d539e360f56de4a176dacc93f5d2dc729f

  • SHA256

    ce91b25495792bab27166e715e7fc9b644a95eff19f1eaebc107de79848f640e

  • SHA512

    7c37534f48c58cc875ea2a3ee9a8b7c8d7aace95246bb9f1f6f90a17cf47611c3526b760bd39db72c8a9554ee0c9b22e01ffbbb53abf070ca8609b5d1ecbd9b1

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://" + 192.168.1.106 + ":" + 8000 + "/amsi.ps1

ps1.dropper

http://" + 192.168.1.106 + ":" + 8000 + "/new_night.ps1

Signatures

Files

  • down.ps1