Behavioral task
behavioral1
Sample
15f42fb4dbe4f31d90126412cc8aca8a7b282f4907837cb2043ee52170646a7e.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15f42fb4dbe4f31d90126412cc8aca8a7b282f4907837cb2043ee52170646a7e.pdf
Resource
win10v2004-20240226-en
General
-
Target
15f42fb4dbe4f31d90126412cc8aca8a7b282f4907837cb2043ee52170646a7e
-
Size
20.7MB
-
MD5
da8af122863f83b3b94f79d3588c19e7
-
SHA1
924500f8074a94936f4fec51773012653115de05
-
SHA256
15f42fb4dbe4f31d90126412cc8aca8a7b282f4907837cb2043ee52170646a7e
-
SHA512
2796705d22c3d6ac8864e031619cc11e520ede7895722fb5b66c45f0c68576124366c1daea11b89f04dcc733b929289692d589e155de2fa4889e5aae3db22f00
-
SSDEEP
393216:L5JuqT2Zr+PMhoaJ7AO07+Gz2DnILeB2a3O+:LXR6Zr0MqaJE6GCDILeRh
Malware Config
Signatures
Files
-
15f42fb4dbe4f31d90126412cc8aca8a7b282f4907837cb2043ee52170646a7e.pdf
-
https://doi.org/10.1007/978-1-4842-8063-8
-
https://powershelltalk.com
-
https://doi.org/10.1007/978-1-4842-8063-8_1
-
https://doi.org/10.1007/978-1-4842-8063-8_2
-
https://docs.microsoft.com/en-us/azure/virtual-desktop/store-fslogix-profile
-
https://azure.microsoft.com/services/virtual-desktop/assessment/
-
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview
-
https://azure.microsoft.com/services/virtual-desktop/assessment
-
https://doi.org/10.1007/978-1-4842-8063-8_3
-
https://doi.org/10.1007/978-1-4842-8063-8_4
-
https://docs.microsoft.com/en-us/azure/virtual-desktop/safe-url-list
-
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/custom-routes-enable-kms-activation
-
https://portal.azure.com
-
https://aka.ms/azmonwvdi
-
http://rdweb.avd.microsoft.com
-
https://doi.org/10.1007/978-1-4842-8063-8_5
-
https://github.com/Ar-Sa/azure-files-samples/tree/master/AzFilesHybrid
-
https://github.com/Ar-Sa/Arun/blob/master/Powershell/Azure storage account file share domain join/set-AzStorageDomainJoin.ps1
-
https://doi.org/10.1007/978-1-4842-8063-8_6
-
https://docs.microsoft.com/en-us/fslogix/
-
https://aka.ms/fslogix/download
-
https://doi.org/10.1007/978-1-4842-8063-8_7
-
https://github.com/Azure/WALinuxAgent
-
https://github.com/Ar-Sa/Arun/blob/master/Powershell/Add language packs to a Windows 10 multi-session image/Add-AVDLanguagePack.ps1
-
https://doi.org/10.1007/978-1-4842-8063-8_8
-
http://portal.azure.com
-
https://github.com/Ar-Sa/Arun/blob/master/PowerShell/PowerShell and ARM to create Azure virtual desktop personal desktop/New-AVDPersonalHostpool.ps1
-
https://raw.githubusercontent.com/Ar-Sa/Arun/master/PowerShell/PowerShell and ARM to create Azure virtual desktop personal desktop/New-personalAVDTemplate.json
-
https://raw.githubusercontent.com/Ar-Sa/Arun/master/PowerShell/PowerShell and ARM to create Azure virtual desktop personal desktop/New-AVDPersonalHostpool.ps1
-
https://www.walmart.com/cp/computers/3951
-
https://www.microsoft.com/en-us/windows/
-
https://www.microsoft.com/en-us/?ql=2
-
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
-
https://azure.microsoft.com/services/monitor/
-
https://docs.microsoft.com/en-us/azure/service-health/alerts-activity-log-service-notifications-portal
-
https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/virtual-desktop-security-baseline
-
https://doi.org/10.1007/978-1-4842-8063-8_9
-
https://www.microsoft.com/p/msix-packaging-tool/9n5lw3jbcxkf
-
https://aka.ms/msixmgr
-
https://www.microsoft.com/en-us/microsoft-365/onedrive/download
-
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWQ1UW
-
https://teams.microsoft.com/downloads/desktopurl?env=production&plat=windows&arch=x64&managedInstaller=true&download=true
-
https://doi.org/10.1007/978-1-4842-8063-8_10
-
https://doi.org/10.1007/978-1-4842-8063-8_11
-
https://docs.microsoft.com/en-us/azure/azuremonitor/essentials/monitor-azure-resource
-
https://portal.azure.com/
-
https://doi.org/10.1007/978-1-4842-8063-8Copyright
-
http://springer-sbm.com
-
http://www.springeronline.com
-
http://springernature.com
-
http://www.apress.com/rights-permissions.Apress
-
http://www.apress.com/bulk-sales.Any
-
https://link.springer.com/book/10.1007/
-
http://PowershellTalk.com
-
http://Bloguc.com
-
http://outlook.com
-
https://doi.org/10.1007/978-1-4842-8063-8_1CHAPTER
-
https://doi.org/10.1007/978-1-4842-8063-8_2CHAPTER
-
https://azure.microsoft.com/services/virtual-����
-
https://doi.org/10.1007/978-1-4842-8063-8_3CHAPTER
-
https://doi.org/10.1007/978-1-4842-8063-8_4CHAPTER
-
http://NNetkms.core.windows.net
-
https://docs.microsoft.com/en-us/azure/virtual-desktop/safe-url-list,
-
http://microsoft.com
-
https://docs.microsoft.com/en-us/azure/virtual-desktop/safe-url-listTable
-
http://xt.blob.core.windows.net
-
http://servicebus.windows.net
-
http://xt.table.core.windows.net
-
http://eh.servicebus.windows.net
-
https://aka.ms/azmonwvdi,
-
http://rdweb.AVD.microsoft.com
-
https://doi.org/10.1007/978-1-4842-8063-8_5CHAPTER
-
https://github.com/Ar-Sa/Arun/blob/master/Powershell/Azure%20storage%20account%20file%20share%20domain%20join/set-AzStorageDomainJoin.ps1
-
http://CopyToPSPath.ps
-
https://docs.microsoft.com/azure/azure-government/documentation-government-get-started-connect-with-ps#
-
https://doi.org/10.1007/978-1-4842-8063-8_6CHAPTER
-
https://aka.ms/fslogix/download.���
-
http://Migrate-UserProfileToFslogix.ps
-
http://domain.com
-
https://doi.org/10.1007/978-1-4842-8063-8_7CHAPTER
-
https://github.com/Ar-Sa/Arun/blob/master/Powershell/Add%20language%20packs%20to%20a%20Windows%2010%20multisession%20image/Add-AVDLanguagePack.ps1.##########################################################
-
http://Microsoft-Windows-Client-Language-Pack_x64_es-es.cab
-
http://Microsoft-Windows-Client-Language-Pack_x64_fr-fr.cab
-
http://Microsoft-Windows-Client-Language-Pack_x64_zh-cn.cab
-
https://doi.org/10.1007/978-1-4842-8063-8_8CHAPTER
-
http://portal.Azure.com
-
https://github.com/Ar-Sa/Arun/blob/master/PowerShell/PowerShell%20and%20ARM%20to%20create%20Azure%20virtual%20desktop%20personal%20desktop/New-AVDPersonalHostpool.ps1.First
-
https://raw.githubusercontent.com/Ar-Sa/Arun/master/PowerShell/PowerShell%20and%20ARM%20to%20create%20Azure%20virtual%20desktop%20personal%20desktop/New-personalAVDTemplate.json,
-
https://raw.githubusercontent.com/Ar-Sa/Arun/master/PowerShell/PowerShell%20and%20ARM%20to%20create%20Azure%20virtual%20desktop%20personal%20desktop/New-AVDPersonalHostpool.ps1.
-
http://powershelltalk.com
-
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/rdp-files65.66.����������������
-
http://dag.id
-
https://raw.githubusercontent.com/Ar-Sa/Arun/master/PowerShell/PowerShell%20and%20ARM%20to%20create%20Azure%20virtual%20desktop%20personal%20desktop/New-personalAVDTemplate.json
-
https://schema.management.Azure.com/schemas/
-
https://wvdportalstorageblob.blob.core.windows.net/galleryartifacts/Configuration.zip
-
http://Configuration.ps
-
https://doi.org/10.1007/978-1-4842-8063-8_9CHAPTER
-
https://www.microsoft.com/p/msix-packaging-tool/9n5lw3jbcxkf.
-
https://aka.ms/msixmgr.
-
http://storageaccount.file.core.windows.net
-
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWQ1UW.
-
https://teams.microsoft.com/downloads/desktopurl?env=production&plat=windows&arch=x64&managedInstaller=true&download=true.
-
https://doi.org/10.1007/978-1-4842-8063-8_10CHAPTER
-
https://doi.org/10.1007/978-1-4842-8063-8_11CHAPTER
-
http://aka.ms/azmonwvdi.����
-
http://aka.ms/azmonwvdi,
-
https://portal.azure.com/,
-
https://doi.org/10.1007/978-1-4842-8063-8���
-
https://doi.org/10.1007/978-1-4842-8063-8IndexAActive
- Show all
-