Static task
static1
Behavioral task
behavioral1
Sample
PsMapExec.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PsMapExec.ps1
Resource
win10v2004-20231215-en
General
-
Target
PsMapExec.ps1
-
Size
833KB
-
MD5
dfb1ab7d3435fab0247a5fc5cacf4681
-
SHA1
b04f0943c9332781fde15895006c4a8dda2cd6da
-
SHA256
89ff06bcf8a0e4f11082f8ec500a2493344f7716633e4aeab904d84bf72eb339
-
SHA512
3137901aa99953bc7ed7ce6454830a8dafee7f04277c663c1e2d86e15333d738909b84987e40d078d9533c2ad08963fc63beb002b63b12f6b001124a8e61160e
-
SSDEEP
12288:cu4F3cdgA6rQjzTzTijyusSFHjrS+CqDaStsV/SX1Q0Dn13hg2jx9kj4IgiMKftX:lc1sShjl9grCPAgiMKfoa3j1B9jGQ
Malware Config
Extracted
https://raw.githubusercontent.com/The-Viper-One/PME-Scripts/main/Invoke-Pandemonium.ps1
https://raw.githubusercontent.com/The-Viper-One/PME-Scripts/main/Kirby.ps1
https://raw.githubusercontent.com/The-Viper-One/PME-Scripts/main/Invoke-NTDS.ps1
https://raw.githubusercontent.com/Leo4j/Amnesiac/main/Amnesiac.ps1
Signatures
Files
-
PsMapExec.ps1.ps1