Overview

overview

10

Static

static

10

a9c7d114af...69.ps1

windows7-x64

1

a9c7d114af...69.ps1

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9c7d114afaa8a1b362670815dd35f69

  • Size

    48KB

  • MD5

    a9c7d114afaa8a1b362670815dd35f69

  • SHA1

    519c6069395a754e5e1ea41cc9915e05421436c1

  • SHA256

    bd29557e5940ebf56dfdf06c779e57c2f30427b6dbe0125b854a97570c6bc6d7

  • SHA512

    3004a4e972789c8f7fbc9ae7c16d747cfcf60ccfa25942284954cdbe03c730fe1fb460ca66569319fd7b2b4310db3fbbff14a3f42159dea2135c0595b171b582

  • SSDEEP

    768:LBOI+Fl+27PN742CIDD3dJfvCIE1UElv2Lvpgmwh/Q7XR5Lh:LcZFw2bd42CIDD3XfvCIEiEB/05Lh

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://legalref.ru/config/id.txt?
exe.dropper

http://legalref.ru/config/logs/scanlogger.php?
exe.dropper

http://legalref.ru/config/putshell.txt?
exe.dropper

http://legalref.ru/config/putpsy.txt?
exe.dropper

http://legalref.ru/config/logs/target.txt
exe.dropper

http://localhost/toolz/phpbot/fxscanbot-id.txt?
exe.dropper

http://localhost/toolz/phpbot/fxscanlogger.php?
exe.dropper

http://localhost/toolz/putshell.txt?
exe.dropper

http://localhost/toolz/putpsy.txt?
exe.dropper

http://localhost/toolz/target.txt

Signatures

Files

  • a9c7d114afaa8a1b362670815dd35f69
    .ps1