Overview

overview

8

Static

static

1

settings.ps1

windows7-x64

settings.ps1

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    settings.ps1

  • Size

    21KB

  • Sample

    231031-p2xbfsaa99

  • MD5

    d4a8463332d11c465c311485626a089e

  • SHA1

    ddc07ff6160187c0b48d9b1d34aa05af90483bd9

  • SHA256

    dff3d7a15b8ff7fada4397088a658bc79d47c0d387ee9a3c710490d73983395a

  • SHA512

    1b385c68fc3e6212c5339b7cfb23816c9ad9bbf9c8c42d817a85b6f26b8014b238815819ff8de4cc79c4fc095be4d5b8a111b3b20c5e695f502fce7bbdc40217

  • SSDEEP

    384:QcyvJh/drDCNrr2YyHEHaeizHlf2GkxUtJNFw5ARMthKqsvvvhUvhkvkNp8mpdFm:QcyvJh/drDCNrr2Yyk6eizFf2GkxUtJb

Score
8/10

Malware Config

Targets

    • Target

      settings.ps1

    • Size

      21KB

    • MD5

      d4a8463332d11c465c311485626a089e

    • SHA1

      ddc07ff6160187c0b48d9b1d34aa05af90483bd9

    • SHA256

      dff3d7a15b8ff7fada4397088a658bc79d47c0d387ee9a3c710490d73983395a

    • SHA512

      1b385c68fc3e6212c5339b7cfb23816c9ad9bbf9c8c42d817a85b6f26b8014b238815819ff8de4cc79c4fc095be4d5b8a111b3b20c5e695f502fce7bbdc40217

    • SSDEEP

      384:QcyvJh/drDCNrr2YyHEHaeizHlf2GkxUtJNFw5ARMthKqsvvvhUvhkvkNp8mpdFm:QcyvJh/drDCNrr2Yyk6eizFf2GkxUtJb

    Score
    8/10

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks