Resubmissions

09/08/2024, 20:19

240809-y38wbaxfkj 10

General

  • Target

    script.ps1

  • Size

    1KB

  • MD5

    894c6e06302980c09ec3360551af243e

  • SHA1

    e2a54aaf8583121e218af7da859ac2720ef91cd5

  • SHA256

    51c515b2702e4d942f07c3ea02d5806d3445babc23e53c6efd1c615b9e09b272

  • SHA512

    3e9da367f8c47bdc3c6c43ba295591625f4903a73d2791440b66819ba69407cbdd84ebe1a254a53ed9106633af9347121b6f4924d8e8383471155fa34fc6faae

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://bin.equinox.io/c/bNyj1mQVY4c/ngrok-v3-stable-windows-amd64.zip

exe.dropper

http://localhost:4040/api/tunnels

Signatures

Files

  • script.ps1
    .ps1