Static task
static1
Behavioral task
behavioral1
Sample
600be2d64a3d6c463d3c281129e91cfb.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
600be2d64a3d6c463d3c281129e91cfb.ps1
Resource
win10v2004-20231215-en
General
-
Target
600be2d64a3d6c463d3c281129e91cfb
-
Size
67KB
-
MD5
600be2d64a3d6c463d3c281129e91cfb
-
SHA1
abf5943766a6a67d4b7bef7f0650e22db4633c30
-
SHA256
cabf6c04001b27b48cfac5a82a75f86857b937ce08facb3a2c034ca0b52330d7
-
SHA512
e2d780be0815c6491609389208099092c78a46f62d39e6813023f805162e0a53202626e4610510189bae4b7b3450ba1eb83671f4664b93b73fbca64ad9b5dd00
-
SSDEEP
1536:6hkxAlD2tqwLgmV2bXP28fviPfKEdED/0M0:ShmV2bXP28fviPfKEdEDG
Malware Config
Extracted
http://pakmin.yourfreehosting.net/perkakas/cmd.txt?
http://uaedesign.com/config/idfx.txt?
http://legalref.ru/cyberz/logs/fxscanlogger.php?
http://brojolelle.org/bnc/cerewet.txt?
http://legalref.ru/cyberz/installpsy.txt?
http://legalref.ru/cyberz/logs/target.txt
http://localhost/toolz/id.txt?
http://localhost/toolz/fxscanlogger.php?
http://localhost/toolz/uploadshell.txt?
http://localhost/toolz/installpsy.txt?
http://localhost/toolz/target.txt
Signatures
Files
-
600be2d64a3d6c463d3c281129e91cfb.ps1