Overview

overview

8

Static

static

1

triage.ps1

windows7-x64

3

triage.ps1

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    triage.ps1

  • Size

    377B

  • Sample

    240714-qjybgasakq

  • MD5

    6fd0fc460bc86793c41f3a7d3c2f0f3f

  • SHA1

    6062bd6dc118d3d455bca6d554236ef8a22261c8

  • SHA256

    6841d27330995b4cbcbe318b046538f6d3f01c59e3b2b7a71e9ed2ce43eb1746

  • SHA512

    892df265e465b61b2b3c988b8b605e6fff996deb2442309bd17990a2d3d79c6664ff5bca6f73c7a414123168b3b7c85f4717b91a2f99a8e776f1d03b90a89559

Score
8/10
execution

Malware Config

Targets

    • Target

      triage.ps1

    • Size

      377B

    • MD5

      6fd0fc460bc86793c41f3a7d3c2f0f3f

    • SHA1

      6062bd6dc118d3d455bca6d554236ef8a22261c8

    • SHA256

      6841d27330995b4cbcbe318b046538f6d3f01c59e3b2b7a71e9ed2ce43eb1746

    • SHA512

      892df265e465b61b2b3c988b8b605e6fff996deb2442309bd17990a2d3d79c6664ff5bca6f73c7a414123168b3b7c85f4717b91a2f99a8e776f1d03b90a89559

    Score
    8/10
    execution

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks