Behavioral task
behavioral1
Sample
2638eaa57e355eca95c8a483b1b0b40aa51ef1b6dbf6f1d8bd8e7769f45aeb2a.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2638eaa57e355eca95c8a483b1b0b40aa51ef1b6dbf6f1d8bd8e7769f45aeb2a.pdf
Resource
win10v2004-20240226-en
General
-
Target
2638eaa57e355eca95c8a483b1b0b40aa51ef1b6dbf6f1d8bd8e7769f45aeb2a
-
Size
32.7MB
-
MD5
f1d33acd4d2ae8922b0c5b5c58ed1663
-
SHA1
3f847870e143dce2de87c141b02b6961883eceb4
-
SHA256
2638eaa57e355eca95c8a483b1b0b40aa51ef1b6dbf6f1d8bd8e7769f45aeb2a
-
SHA512
c5bf75e3771d3662336729c8b4c0f0a45f49bf80eebcb9dbaf9ed8845532a174add69337c4a2f77a5f65754fff9f9dce3ef879bb83061a055a995769c49f2b61
-
SSDEEP
786432:M6jg72ZJH32c9/WvmcmLS6cUzS37rrT1LXf9tlwxdaoQUv2:M6jg7AVmc9uNmL3cUzS373T1Lv9tlwCl
Malware Config
Signatures
Files
-
2638eaa57e355eca95c8a483b1b0b40aa51ef1b6dbf6f1d8bd8e7769f45aeb2a.pdf
-
http://py4e.org/
-
http://www.packtpub.com/support/errata
-
http://authors.packtpub.com/
-
https://packt.link/r/1801812985
-
https://packt.link/free-ebook/9781801812986
-
https://docs.microsoft.com/en-us/Windows/security/threat-protection/Windows-sandbox/Windows-sandbox-overview
-
https://github.com/PowerShell/PowerShell
-
https://docs.microsoft.com/en-gb/powershell/scripting/install/installing-powershell-on-Windows?view=powershell-7.2#install-the-msi-package-from-the-command-line
-
https://docs.microsoft.com/en-us/Windows/package-manager/winget/
-
https://docs.microsoft.com/en-us/dotnet/api/system.diagnostics.process
-
https://www.jsnover.com/Docs/MonadManifesto.pdf
-
https://web.stanford.edu/~ouster/cgi-bin/papers/scripting.pdf
-
https://docs.microsoft.com/en-us/powershell/scripting/developer/cmdlet/approved-verbs-for-windows-powershell-commands?view=powershell-7.2
-
https://www.powershellgallery.com/
-
https://github.com/
-
https://devblogs.microsoft.com/commandline/introducing-windows-terminal/
-
https://github.com/Microsoft/Terminal
-
https://www.python.org/downloads
-
https://dspinellis.github.io/oral-history-of-unix/frs122/unixhist/finalhis.htm
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_automatic_variables
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_preference_variables
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_arrays
-
https://powershell.one/
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_variables
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_objects
-
https://docs.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-04
-
https://docs.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-05
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_booleans
-
https://docs.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-09
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_hash_tables
-
https://docs.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-10
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_splatting
-
https://code.visualstudio.com/download
-
https://code.visualstudio.com/docs/setup/linux
-
https://docs.microsoft.com/en-us/powershell/scripting/dev-cross-plat/vscode/using-vscode
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_if
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_switch
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_foreach
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_do
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_while
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_for
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_break
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_continue
-
https://www.w3schools.com/
-
http://www.csszengarden.com/
-
https://leanpub.com/creatinghtmlreportsinwindowspowershell/read
-
https://github.com/crista/exercises-in-programming-style
-
https://www.gutenberg.org/ebooks/7849.txt.utf-8
-
https://raw.githubusercontent.com/stopwords-iso/stopwords-en/master/stopwords-en.txt
-
https://docs.microsoft.com/en-us/dotnet/standard/serialization/introducing-xml-serialization
-
https://neuters.de/
-
https://learn.microsoft.com/en-us/dotnet/api/system.security.securestring
-
https://random.dog/woof.json
-
https://random.dog/
-
http://api.open-notify.org/astros.json
-
http://api.open-notify.org/iss-now.json
-
http://universities.hipolabs.com/search?country=United+Kingdom
-
https://www.packtpub.com/product/understanding-apis-and-restful-apis-crash-course-video/9781800564121
-
https://www.digitalfluency.guide/apis/introduction-to-apis
-
https://restfulapi.net/
-
https://www.w3schools.com/js/js_json_intro.asp
-
https://json-schema.org/understanding-json-schema
-
https://learn.microsoft.com/en-us/samples/browse/
-
https://practical365.com/
-
https://www.weatherapi.com/
-
https://learn.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-12
-
https://github.com/chriskuech/functional
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions_advanced?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions_advanced_methods?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions_advanced_parameters?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions_argument_completion?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions_cmdletbindingattribute?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_functions_outputtypeattribute?view=powershell-7.3
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_script_blocks?view=powershell-7.3
-
https://devblogs.microsoft.com/scripting/debugging-powershell-script-in-visual-studio-code-part-1/
-
https://devblogs.microsoft.com/scripting/debugging-powershell-script-in-visual-studio-code-part-2/
-
https://code.visualstudio.com/Docs/editor/debugging
-
https://learn.microsoft.com/en-us/powershell/scripting/dev-cross-plat/vscode/using-vscode?view=powershell-7.3
-
https://powershellexplained.com/2017-05-12-Powershell-Plaster-adventures-in/
-
https://github.com/KevinMarquette/PlasterTemplates
-
https://devblogs.microsoft.com/powershell/powershellget-in-powershell-7-4-updates/
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.psresourceget/?view=powershellget-3.x
-
https://learn.microsoft.com/en-us/powershell/module/powershellget/?view=powershellget-2.x
-
https://learn.microsoft.com/en-us/powershell/scripting/developer/module/how-to-write-a-powershell-module-manifest
-
https://powershellexplained.com/2017-05-12-Powershell-Plaster-adventures-in/#template-folder-and-file-structure
-
https://techcommunity.microsoft.com/t5/ask-the-performance-team/the-basics-of-group-policies/ba-p/372404
-
https://learn.microsoft.com/en-us/powershell/scripting/learn/ps101/08-powershell-remoting
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies
-
https://learn.microsoft.com/en-gb/Windows/security/application-security/application-control/Windows-defender-application-control/wdac
-
https://learn.microsoft.com/en-us/powershell/scripting/learn/application-control
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_language_modes
-
https://www.microsoft.com/en-us/msrc/Windows-security-servicing-criteria
-
https://devblogs.microsoft.com/engineering-at-microsoft/generating-software-bills-of-materials-sboms-with-spdx-at-microsoft/
-
https://en.wikipedia.org/wiki/Secure_Shell
-
https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/ssh-remoting-in-powershell-core
-
https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/overview
-
https://devblogs.microsoft.com/powershell/powershell-the-blue-team/
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_Windows
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_non-Windows
-
https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/cimwin32-wmi-providers
-
https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-process
-
https://en.wikipedia.org/wiki/.NET_Framework
-
https://learn.microsoft.com/en-us/powershell/gallery/concepts/module-psedition-support
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_powershell_editions
-
https://learn.microsoft.com/en-us/powershell/scripting/whats-new/differences-from-windows-powershell
-
https://en.wikipedia.org/wiki/Web-Based_Enterprise_Management
-
https://en.wikipedia.org/wiki/Common_Information_Model_(computing)
-
https://en.wikipedia.org/wiki/WS-Management
-
https://en.wikipedia.org/wiki/Windows_Management_Instrumentation
-
https://en.wikipedia.org/wiki/Distributed_Component_Object_Model
-
https://learn.microsoft.com/en-us/powershell/scripting/whats-new/migrating-from-windows-powershell-51-to-powershell-7
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_windows_powershell_compatibility
-
https://learn.microsoft.com/en-us/powershell/scripting/whats-new/module-compatibility
-
https://devblogs.microsoft.com/scripting/remoting-the-implicit-way/
-
https://learn.microsoft.com/en-us/powershell/scripting/samples/getting-wmi-objects--get-ciminstance-?view=powershell-7.4
-
https://devblogs.microsoft.com/scripting/using-powershell-cim-cmdlets-to-explore-wmi-classes/
-
https://apps.microsoft.com/
-
https://www.virtualbox.org/manual/UserManual.html#installation
-
http://isoredirect.centos.org/centos/7/isos
-
https://www.linuxfordevices.com/tutorials/centos/centos-on-virtualbox
-
https://learn.microsoft.com/en-us/powershell/scripting/install/install-ubuntu
-
https://github.com/PowerShell/PowerShell/releases/
-
https://github.com/PowerShell/PowerShell/releases/download/v7.2.17/powershell-7.2.17-1.rh.x86_64.rpm
-
https://code.visualstudio.com/
-
https://learn.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-linux
-
https://learn.microsoft.com/en-us/powershell/scripting/install/install-rhel
-
https://learn.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-macos
-
https://code.visualstudio.com/docs/setup/mac
-
https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/ssh-remoting-in-powershell
-
https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse?tabs=gui
-
https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_server_configuration
-
https://learn.microsoft.com/en-us/powershell/scripting/install/community-support
-
https://www.raspberrypi.com/software/
-
https://projects.raspberrypi.org/en/projects/build-an-octapi
-
https://blogs.oracle.com/developers/post/building-the-worlds-largest-Raspberry-pi-cluster
-
https://learn.microsoft.com/en-us/powershell/scripting/install/powershell-on-arm
-
https://code.visualstudio.com/docs/setup/raspberry-pi
-
https://code.visualstudio.com/docs/remote/ssh-tutorial
-
https://github.com/PowerShell/PowerShell-IoT
-
https://learn.microsoft.com/en-us/windows/iot/product-family/windows-iot
-
https://cdn-learn.adafruit.com/downloads/pdf/getting-started-with-windows-iot-on-raspberry-pi.pdf
-
https://devblogs.microsoft.com/premier-developer/getting-started-with-windows-10-iot-core-raspberry-pi-3b/
-
https://www.raspberrypi.com/documentation/computers/configuration.html
-
https://en.wikipedia.org/wiki/I%C2%B2C
-
https://learn.sparkfun.com/tutorials/i2c/all
-
https://learn.sparkfun.com/tutorials/serial-peripheral-interface-spi/all
-
https://dotnet.microsoft.com/en-us/learn/dotnet/what-is-dotnet
-
https://learn.microsoft.com/en-us/dotnet/core/introduction
-
https://learn.microsoft.com/en-us/previous-versions/tn-archive/bb496996(v=technet.10)
-
https://learn.microsoft.com/en-gb/dotnet/api/system.management.automation
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_classes
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_classes_constructors
-
https://learn.microsoft.com/en-gb/dotnet/api/system.text.stringbuilder
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/add-type
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/new-object
-
https://learn.microsoft.com/en-us/dotnet/api/system.timers.timer
-
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/register-objectevent
-
https://devblogs.microsoft.com/powershell/powershell-eventing-quickstart/
-
https://dotnet.microsoft.com/en-us/learn/csharp
-
https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-printer-methods
-
https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/setdefaultprinter-method-in-class-win32-printer
-
http://packtpub.com/
-
http://www.packtpub.com/
-
https://packt.link/1800566379
-
https://packt.link/1837637458
- Show all
-