Behavioral task
behavioral1
Sample
6fbd823af2e71ced0051cdebaf52c6f456b076c7f48a15de637c4c910e78f210.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6fbd823af2e71ced0051cdebaf52c6f456b076c7f48a15de637c4c910e78f210.pdf
Resource
win10v2004-20240226-en
General
-
Target
6fbd823af2e71ced0051cdebaf52c6f456b076c7f48a15de637c4c910e78f210
-
Size
2.2MB
-
MD5
aa4d51a315ed7b2fd43d2b31e5c84505
-
SHA1
5624ac9f060c43cfaf14965c84449b2799753b38
-
SHA256
6fbd823af2e71ced0051cdebaf52c6f456b076c7f48a15de637c4c910e78f210
-
SHA512
da74f40f8045fe15e8a5733cf27b2a77f0be2f5baba1ca70a38711e17651b6b5114f40ee54690d29fb121c54475a9cba3e3b4d5d19112380e978bf0f3c253dcc
-
SSDEEP
49152:dKjqu7R+mEIzLbN/pICvW1AWffhpf3ZDHplAd3AkTivMJ7QKHt:gUoLbN/pIqWhXDHjAFNzFQKN
Malware Config
Signatures
Files
-
6fbd823af2e71ced0051cdebaf52c6f456b076c7f48a15de637c4c910e78f210.pdf
-
http://www.packtpub.com
-
http://www.PacktPub.com
-
https://www.packtpub.com/mapt
-
https://www.amazon.com/dp/1787126307
-
http://www.packtpub.com/authors
-
https://www.packtpub.com/sites/default/files/downloads/MasteringWindowsPowerShellScriptingSecondEdition_ColorImages.pdf
-
http://www.packtpub.com/submit-errata
-
https://www.packtpub.com/books/content/support
-
http://social.technet.microsoft.com/wiki/contents/articles/2969.windows-powershell-ise-add-on-tools.aspx
-
http://code.visualstudio.com
-
https://github.com/PowerShell/PowerShell/releases/latest
-
https://msdn.microsoft.com/en-us/library/ms714428(v=vs.85).aspx
-
https://www.microsoft.com/en-us/download/details.aspx?id=51451
-
https://www.powershellgallery.com
-
https://github.com/NuGet/NuGetGallery
-
https://blogs.msdn.microsoft.com/powershell/2014/05/20/setting-up-an-internal-powershellget-repository/
-
https://msdn.microsoft.com/en-us/library/system.management.automation.psmembertypes(v=vs.85).aspx
-
https://blogs.msdn.microsoft.com/besidethepoint/2011/11/22/psobject-and-the-adapted-and-extended-type-systems-ats-and-ets/
-
https://msdn.microsoft.com/en-us/library/az4se3k1(v=vs.110).aspx
-
https://msdn.microsoft.com/en-us/library/system.string.format(v=vs.110).aspx#Starting
-
https://blogs.msdn.microsoft.com/powershell/2013/06/11/understanding-powershells-type-conversion-magic/
-
https://msdn.microsoft.com/en-us/library/system.collections.generic(v=vs.110).aspx
-
https://msdn.microsoft.com/en-us/library/mt472912(v=vs.110).aspx
-
https://msdn.microsoft.com/en-us/library/8kb3ddd4(v=vs.110).aspx
-
https://msdn.microsoft.com/en-us/library/91hfhz89(v=vs.110).aspx
-
https://www.debuggex.com/
-
http://regexhero.net/tester/
-
http://www.regexplanet.com/advanced/dotnet/index.html
-
http://www.regular-expressions.info
-
https://msdn.microsoft.com/en-us/library/system.security.accesscontrol.filesystemrights(v=vs.110).aspx
-
https://msdn.microsoft.com/en-us/library/system.security.accesscontrol.registryrights(v=vs.110).aspx
-
https://msdn.microsoft.com/en-us/library/aa394372(v=vs.85).aspx
-
https://msdn.microsoft.com/en-us/library/aa389388(v=vs.85).aspx
-
https://msdn.microsoft.com/en-us/library/aa393907(v=vs.85).aspx
-
https://msdn.microsoft.com/en-us/library/aa394375(v=vs.85).aspx
-
https://msdn.microsoft.com/en-us/library/aa389393(v=vs.85).aspx
-
https://msdn.microsoft.com/en-us/library/aa392710(v=vs.85).aspx
-
https://www.w3schools.com/css/
-
https://msdn.microsoft.com/en-us/library/ms256115(v=vs.110).aspx
-
https://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html
-
https://badssl.com/
-
https://msdn.microsoft.com/en-us/library/system.net.servicepointmanager(v=vs.110).aspx
-
https://api.github.com
-
https://developer.github.com/v3/
-
https://developer.github.com/v3/repos/#list-user-repositories
-
https://developers.google.com/maps/documentation/geocoding/start
-
https://developer.github.com/v3/oauth/#web-application-flow
-
https://developer.spotify.com/my-applications/#!/applications
-
https://developer.spotify.com/web-api/authorization-guide/#authorization-code-flow
-
https://developer.spotify.com/web-api/using-scopes/
-
https://developer.spotify.com/web-api/get-list-users-playlists/
-
https://developer.spotify.com/web-api/get-playlists-tracks/
-
https://developer.spotify.com/web-api/playlist-endpoints/
-
https://github.com/PowerShell/PowerShell/tree/master/demos/SSHRemoting
-
https://support.microsoft.com/en-us/help/951016/description-of-user-account-control-and-remote-restrictions-in-windows-vista
-
https://blogs.technet.microsoft.com/ashleymcglone/2016/08/30/powershell-remoting-kerberos-double-hop-solved-securely/
- Show all
-