General

  • Target

    powershell.ps1

  • Size

    1KB

  • MD5

    337199a189f5387a9bdecd53c57a180a

  • SHA1

    dd9bc5ab97b217d1675a6398c6dd6174adf83e5e

  • SHA256

    3c8fca1889cffc699e83c4ba19ba151a482a1ccce3aaeccff79358688569052f

  • SHA512

    679eadf2f2fae863bf69f3892cfc5b77d4abc4a8053be2fdd869c3f78ef3a49bb6492cc8260d12276c4eac26f8690333d1f81fc2cefed16602e5d64c4bd13b9d

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://wirelesskinect.com/wp-admin/UBr/

exe.dropper

http://dibmaps.com/wp-admin/giRo16/

exe.dropper

http://www.hahawaii.org/wp-admin/2YnTK/

exe.dropper

http://bloodybits.com/edwinjefferson.com/U7w54/

exe.dropper

http://plugnstage.com/logo/sec.accs.docs.net/QpVh/

Signatures

Files

  • powershell.ps1