General

  • Target

    run.ps1

  • Size

    1KB

  • MD5

    297ddd7de0d6253397576c3188197e35

  • SHA1

    2a8373a32f7dedaa10707fe12cceb57b7640396b

  • SHA256

    22a5e478083510fa75a6661e43888590cab6bf6082f184d9d04b1e8de15bca24

  • SHA512

    cc2b972d7badc3e511f45163912f1dcb084e6128fccdeeef775a5f6e1d327a5f42d06010fad8cc32010bc4f6edc641abf8e905a70ce3611e703546e024f2fda3

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://haicunoi.ro/cgi-bin/2TX/

exe.dropper

https://crosscountrysupply.com/wp-includes/OpF/

exe.dropper

https://akuntansi.widyakartika.ac.id/wp-content/uploads/tEEe/

exe.dropper

https://giangocngan.com/css/vK/

exe.dropper

http://ebe.dk/_borders/cZJi/

Signatures

Files

  • run.ps1
    .ps1