Static task
static1
Behavioral task
behavioral1
Sample
4e2ed0233a63c269460fadbfd0c38011.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e2ed0233a63c269460fadbfd0c38011.ps1
Resource
win10v2004-20231215-en
General
-
Target
4e2ed0233a63c269460fadbfd0c38011.unknown
-
Size
55KB
-
MD5
4e2ed0233a63c269460fadbfd0c38011
-
SHA1
6a65286dbd006e0c13d63fb57aa78838fce83ead
-
SHA256
296f9d3094ea4f1f2cea677ee7414aef3f5edaee19be34fbb10250dd26a5fb90
-
SHA512
fe6f15c165efc584817b6dea7297efaebb0d0778ac312ce2b2c02f1501f5f80bc3598c6f64d18475aa8c1e16e4c241fdbcd412608dc1cdf6f3f900e38e7f1c26
-
SSDEEP
768:Z2miy0DhCivgI+Na+27PN7422IDDndJfvCaEQUElv2LvpgmwhIU7XR5LR:Zxkq1N92bd422IDDnXfvCaEpEBIg5LR
Malware Config
Extracted
http://legalref.ru/config/id.txt?
http://legalref.ru/config/logs/scanlogger.php?
http://legalref.ru/config/putshell.txt?
http://legalref.ru/config/putpsy.txt?
http://legalref.ru/config/logs/target.txt
http://localhost/toolz/phpbot/fxscanbot-id.txt?
http://localhost/toolz/phpbot/fxscanlogger.php?
http://localhost/toolz/putshell.txt?
http://localhost/toolz/putpsy.txt?
http://localhost/toolz/target.txt
Signatures
Files
-
4e2ed0233a63c269460fadbfd0c38011.unknown.ps1