Overview

overview

10

Static

static

10

Dokumentieren.ps1

windows7-x64

1

Dokumentieren.ps1

windows10-2004-x64

1

beispiel.ps1

windows7-x64

1

beispiel.ps1

windows10-2004-x64

1

getip.py

windows7-x64

3

getip.py

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3fb4c1b17c0a83b4cf839d835471e8918f283401ea5389a4f7f907725459af68.zip.zip

  • Size

    3KB

  • MD5

    3a2cdd1d7374d402125f03486f4c4308

  • SHA1

    ba611f54f79a0c4260225d72035bc97dfc290367

  • SHA256

    6c39f86abcf64a7f2cf555d3a95f4b3a9a8eed1c1b0c4a004b53b23e806b9cfa

  • SHA512

    324c89d021deade781b059e4515fb41438b3dd3f3550b184e66cfdddd93ff84b2c7752bc67200a6b26c979e912c558345d6aa0c3c72684f448549aee04b13ba5

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

http://fritz.box:49000/tr64desc.xml

Extracted

Language
ps1
Source
URLs
ps1.dropper

http://fritz.box:49000/upnp/control/deviceinfo

Signatures

Files

  • 3fb4c1b17c0a83b4cf839d835471e8918f283401ea5389a4f7f907725459af68.zip.zip
    .zip

    Password: infected

  • 3fb4c1b17c0a83b4cf839d835471e8918f283401ea5389a4f7f907725459af68.zip
    .zip
  • 1506-132.txt
  • Dokumentieren.ps1
    .ps1
  • beispiel.ps1
    .ps1
  • getip.py