General

  • Target

    NEW_mormons_v1.ps1.zip

  • Size

    930B

  • MD5

    1c56cd67cec688b040fa042431b341b0

  • SHA1

    f70f1a578288aca030bcfb691b5f5e6332d2dbd1

  • SHA256

    05a682fe61895293ac839ec8fe15eba7d11be0dc69fd5161bbcda77185eb32ed

  • SHA512

    ba2f161290c0b9693452f2ee9049eaef722e0270127807c6973bcaade5107de01e30b8337349dbecfb1f724f6aa59d4b270c2b92fa3caf59527e0d9ab08dd139

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://tatmacerasi.com/data/czx.jpg

exe.dropper

https://623start.site

exe.dropper

https://tatmacerasi.com/data/czx.jpg

Signatures

Files

  • NEW_mormons_v1.ps1.zip
    .zip

    Password: infected

  • 3d8afeb666655eb0d84c6cd6ae5b102934a205563543e965ab1f4cc35f73639e.ps1
    .ps1