Static task
static1
Behavioral task
behavioral1
Sample
806086b840f22037026ca63793563b55251840d7804e5287fbc60c241853f847.ps1
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
806086b840f22037026ca63793563b55251840d7804e5287fbc60c241853f847.ps1
Resource
win10v2004-20240709-en
General
-
Target
806086b840f22037026ca63793563b55251840d7804e5287fbc60c241853f847.ps1
-
Size
2KB
-
MD5
514dc4ec61581a335599b2138f2df4a3
-
SHA1
c007314082d611feaa66fe764a0b383840768866
-
SHA256
806086b840f22037026ca63793563b55251840d7804e5287fbc60c241853f847
-
SHA512
1ce0d50c4bd02bf79801cb17af94a717b773a37ff0f6f4d14c3f977e19bd4520ef6c85a47da4d88e4d85536e2fd8db158d5efa0d2154ceaab2d1e935aebe0ebf
Malware Config
Extracted
http://47.128.226.30/safe_shell.shc.exe
http://47.128.226.30/decoy/Do-Duc-Hieu-OSWE.pdf
http://47.128.226.30/safe_shell.shc.exe
Signatures
Files
-
806086b840f22037026ca63793563b55251840d7804e5287fbc60c241853f847.ps1.ps1