Overview

overview

10

Static

static

1

powershell-1.ps1

windows10-1703-x64

10

powershell-1.ps1

windows10-2004-x64

10

powershell-1.ps1

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    powershell-1.ps1

  • Size

    3.5MB

  • Sample

    240329-rf6n4sag99

  • MD5

    91928587438750fa827193b6299392c3

  • SHA1

    8a758216da9043e5d21457335c522afe037b3f0e

  • SHA256

    ace82e39c0c7bba7b66f589ae8523aeffb1b34aeafe6d2f1f5ed873a0b980936

  • SHA512

    224e6479f27b0a96363e6c863063b37fe696124a8d5357495bd81a56dc8c74a5c17d5d847acb1f085136406ba69b7503a911e125e8061a3a723f1f84ecc18c2c

  • SSDEEP

    49152:rOZgaPlGsa4cA+szFtMe3Ba0Uyz8JZC37YHt:j

Score
10/10
jupyterbackdoorstealertrojan

Malware Config

Targets

    • Target

      powershell-1.ps1

    • Size

      3.5MB

    • MD5

      91928587438750fa827193b6299392c3

    • SHA1

      8a758216da9043e5d21457335c522afe037b3f0e

    • SHA256

      ace82e39c0c7bba7b66f589ae8523aeffb1b34aeafe6d2f1f5ed873a0b980936

    • SHA512

      224e6479f27b0a96363e6c863063b37fe696124a8d5357495bd81a56dc8c74a5c17d5d847acb1f085136406ba69b7503a911e125e8061a3a723f1f84ecc18c2c

    • SSDEEP

      49152:rOZgaPlGsa4cA+szFtMe3Ba0Uyz8JZC37YHt:j

    Score
    10/10
    jupyterbackdoorstealertrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks