Static task
static1
Behavioral task
behavioral1
Sample
3d8afeb666655eb0d84c6cd6ae5b102934a205563543e965ab1f4cc35f73639e.ps1
Resource
win7-20231020-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d8afeb666655eb0d84c6cd6ae5b102934a205563543e965ab1f4cc35f73639e.ps1
Resource
win10v2004-20231023-en
3 signatures
150 seconds
General
-
Target
NEW_mormons_v1.ps1.zip
-
Size
930B
-
MD5
1c56cd67cec688b040fa042431b341b0
-
SHA1
f70f1a578288aca030bcfb691b5f5e6332d2dbd1
-
SHA256
05a682fe61895293ac839ec8fe15eba7d11be0dc69fd5161bbcda77185eb32ed
-
SHA512
ba2f161290c0b9693452f2ee9049eaef722e0270127807c6973bcaade5107de01e30b8337349dbecfb1f724f6aa59d4b270c2b92fa3caf59527e0d9ab08dd139
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
ps1.dropper
https://tatmacerasi.com/data/czx.jpg
exe.dropper
https://623start.site
exe.dropper
https://tatmacerasi.com/data/czx.jpg
Signatures
Files
-
NEW_mormons_v1.ps1.zip.zip
Password: infected
-
3d8afeb666655eb0d84c6cd6ae5b102934a205563543e965ab1f4cc35f73639e.ps1.ps1