Static task
static1
Behavioral task
behavioral1
Sample
AmsiBypass.ps1
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
AmsiBypass.ps1
Resource
win10v2004-20231215-en
4 signatures
150 seconds
General
-
Target
AmsiBypass.ps1
-
Size
338B
-
MD5
f9e24acaddca4dbc265b301ff863d623
-
SHA1
1854ee3cd17d840e40d2c005d4685cb8f4e69db3
-
SHA256
bfc006e6459a7c2e16a45f5cc613e202d297e08f0f8246d8ea198e3ecc7411de
-
SHA512
f52f53325a95e9d0826d24d78c621fae8ae3c2f7494ac5412a7589bb48275b30f7815694ce8027b312517646eb6bff428ef0fab674de5f2df04eb437cfc817c8
Score
10/10
Malware Config
Extracted
Language
ps1
Deobfuscated
URLs
ps1.dropper
http://37.252.67.6/pwsh_runner.ps1
Signatures
Files
-
AmsiBypass.ps1