General
- Target run.ps1
- Size 311B
- Sample240809-mkmdtatbre
- SHA256 0b08e922c4fccd49ab1e5d2224c9d8c05b971a2ac1c915272dd2dcbed1eddff2
- MD5 de044d80b036f10d7676b2ed165ca8e2
- SHA1 d57e04d4b51cbd49cb2970c8b3e3a41b6f390b36
- SHA512 7031caed7a49668b90e772167eaf3ed191b04e7efc6f4d178410cfb22fbb3c87ddd636d3fdf7531d9965100603a0fa610775f47e0b9a78d0e47b3b1c7cf352ff
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
run.ps1
Resource
win7-20240729-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target run.ps1
- Size 311B
- SHA256 0b08e922c4fccd49ab1e5d2224c9d8c05b971a2ac1c915272dd2dcbed1eddff2
- MD5 de044d80b036f10d7676b2ed165ca8e2
- SHA1 d57e04d4b51cbd49cb2970c8b3e3a41b6f390b36
- SHA512 7031caed7a49668b90e772167eaf3ed191b04e7efc6f4d178410cfb22fbb3c87ddd636d3fdf7531d9965100603a0fa610775f47e0b9a78d0e47b3b1c7cf352ff
- MD5 SHA1 SHA512
-
Drops file in Drivers directory
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Drops file in System32 directory