Static task
static1
Behavioral task
behavioral1
Sample
rfm.ps1
Resource
win7-20230831-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
rfm.ps1
Resource
win10v2004-20230915-en
windows10-2004-x64
5 signatures
150 seconds
General
-
Target
rfm.ps1
-
Size
325B
-
MD5
2c79c0b1c375182064330bab3cb8762f
-
SHA1
edc047f214bf96ae51b2e8f6c2dbb52f6fdc3710
-
SHA256
29845a96e5b8d9a5b7739e4d44b6e3895ceddece16c78b24d23fb72d622f6bfb
-
SHA512
fc39714075853136978516c800e55ec72aa3ab5267d715a003d225f026ef8fead0986f6c57404ae88d4ebb89ce7af69985999e655e0279a33e44b0cd1ef608da
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
exe.dropper
http://eu-sig-upd018.trendmicro-upd-eu-011.com/mgstc.dll
Signatures
Files
-
rfm.ps1