General

  • Target

    2ndKeyboard.ps1

  • Size

    11KB

  • Sample

    240722-en7j6ayflj

  • MD5

    0105fac8d132386d14ff52f70729a6ae

  • SHA1

    adcd60803589d2f535a15d076eca15247796526e

  • SHA256

    7385890aabf8664af9980df334248017bd6c5efd917234b4b0036af28c8f355b

  • SHA512

    bb10b611abc5fb2c882fd7f82c1e88f57fb37ca72108d05f245dd516605e11af325a6ba920f9af5a3fa8d62e1a3186df343b0ee0168c769e9086d38c9c758560

  • SSDEEP

    192:S4EgVxFLfSlKRPTxlGveogSkwf2Dp4wiJShC:/1LQKRPTxlG2ogSk/14wiUhC

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://www.autohotkey.com/download/ahk-v2.exe

exe.dropper

https://www.autohotkey.com/download/ahk-install.exe

Targets

    • Target

      2ndKeyboard.ps1

    • Size

      11KB

    • MD5

      0105fac8d132386d14ff52f70729a6ae

    • SHA1

      adcd60803589d2f535a15d076eca15247796526e

    • SHA256

      7385890aabf8664af9980df334248017bd6c5efd917234b4b0036af28c8f355b

    • SHA512

      bb10b611abc5fb2c882fd7f82c1e88f57fb37ca72108d05f245dd516605e11af325a6ba920f9af5a3fa8d62e1a3186df343b0ee0168c769e9086d38c9c758560

    • SSDEEP

      192:S4EgVxFLfSlKRPTxlGveogSkwf2Dp4wiJShC:/1LQKRPTxlG2ogSk/14wiUhC

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks