General

  • Target

    Rc7Rel.zip

  • Size

    9.9MB

  • Sample

    241005-xhhyqayhqj

  • MD5

    5a05edc4aa8452eb894e8fe8b15a05f2

  • SHA1

    753b05b765375d5051a97e78c3290d2bb57d8436

  • SHA256

    e2430be4254080e2ad735e09c0e5fc83ebe2fc034662edcc898f6444bb6ec0d5

  • SHA512

    c6f651eda33cf1cc23f0667894f8ea0440cd4e9b95b8c4c0aaaee34081d2202908935fa7cb606c3a15afcb6a97bbdc590a1dac6320ef8c3a1b7752243d881813

  • SSDEEP

    196608:ki9qWD1m7lBz6x4M2Y7Lux/jyAVW4TZJtbYNB6ha:kdWo7b84M2YM/9Trt1ha

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:22612

bay-husband.gl.at.ply.gg:22612

Attributes
  • Install_directory

    %AppData%

  • install_file

    WebRuntime.exe

Targets

    • Target

      AlphaBlendTextBox.dll

    • Size

      24KB

    • MD5

      e6b8735ea19da68d9baa23f945a6fad3

    • SHA1

      65ae6742bf4106ce56d57d3ab427bd3e379f9ca3

    • SHA256

      48541be9ed6be56e4ee61dd48ce6b237b7a83a3be4db5a54ce350a042c77ecfe

    • SHA512

      ca3f3945406b9dc64b67f78cb75687b487203f177f4d3a96ae070f5aafa01ef43c733dd69847c095d6484a616abfe85f37568f8b289564693b6a3947fcac4585

    • SSDEEP

      192:iDGJzcLqS+q+obtogcv7QZYU+Am6+cfX/huI1Ps1YK2c5PkDVX:iKqHtobQZYU+Al+8XAI1q2c5PkDVX

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      Aspose.Zip.dll

    • Size

      3.1MB

    • MD5

      322f5ac4c812d1c54e4b5c332777090e

    • SHA1

      107dfdc3c1a8691a3af72083e5990b9f976bb216

    • SHA256

      b78c5a7f048508213929a902cafa058b66cebe742240198c65403fe7f5ed0d3f

    • SHA512

      35c51b7d6b746efe0dc0e577fd3b974edf2761e5fe94f2b7db2356338e5ce97f6785bb083751683386b5ff7b4ccc3bea1ad5832f9481f1cac607c2e5d51a8877

    • SSDEEP

      49152:PVfklBmsMNwpJNDgS3a7fyWMQPFVxzwzE8qFzOaeu+AisC:PVi/9mz97zwzr+wwC

    Score
    1/10
    • Target

      Bunifu_UI_v1.5.3.dll

    • Size

      236KB

    • MD5

      2ecb51ab00c5f340380ecf849291dbcf

    • SHA1

      1a4dffbce2a4ce65495ed79eab42a4da3b660931

    • SHA256

      f1b3e0f2750a9103e46a6a4a34f1cf9d17779725f98042cc2475ec66484801cf

    • SHA512

      e241a48eafcaf99187035f0870d24d74ae97fe84aaadd2591cceea9f64b8223d77cfb17a038a58eadd3b822c5201a6f7494f26eea6f77d95f77f6c668d088e6b

    • SSDEEP

      6144:SIQpxILDXGGMO7Ice9C5kQw2hWHcHTykhb:SIQpxILDXGGlET9n/cHG

    Score
    1/10
    • Target

      RC7.exe

    • Size

      809KB

    • MD5

      8431fbda6408a7a2d8d954abb46d0012

    • SHA1

      2f268b2a51379762b268f0b208ca48826e623f93

    • SHA256

      befedb8dcf588b42acd2db96dc71d82df5da67821b0b3403098de3b77e345b33

    • SHA512

      e25bf48f70bad66c48095514444f64717aea8c14228519e76a6d0280cef2458af513f68d26fc11bb4599e125acd9d88c8af0092cc20d11434b97b2de5e5fad64

    • SSDEEP

      6144:gbK5rCbsIg2mvqvUOCbsIg2mvqvUzwvIJVLfsMT:DMbsIg2mCvUPbsIg2mCvUztVLfRT

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      System.Runtime.CompilerServices.Unsafe.dll

    • Size

      21KB

    • MD5

      82d8aea1b8101b7a70c2d47636e29340

    • SHA1

      fd55a3bc6b0928a029b29dd0559fed4ce30b79d4

    • SHA256

      92726189520484eb6eb2fc977c1b87e6510b565387d2d0aeaf55d42058973d36

    • SHA512

      c45b9d897d1bc3d7ea24f1cbfb3cb9c2b79212492ad85aa9613827f9a97cf40c37ff48f929bd0e8cbaa9cc34a4656df43db3df1c36370f06b0ec1bb303ef340e

    • SSDEEP

      192:L6MyXqODrcxdZyluZCCjdks/nGfe4pBjSLAdS4BEWAaAXcrMHnhWgN7aMW+4JqnD:L6SOadHFm0GftpBjxp4aQHRN74l3g

    Score
    1/10
    • Target

      System.Text.Encoding.CodePages.dll

    • Size

      743KB

    • MD5

      1d0a876eaaf4b12ee6fbe592e34920ba

    • SHA1

      62d81e666e4024049a9edefc25f293900563bb2c

    • SHA256

      a750dd0f58327ac94487c92475eabb99487a46407256e2fa8593852b4eebcef8

    • SHA512

      a6a50f4bcefca1c35142d8e6bbadfbb2890396bce078a4a19d704289adca40143c18d2f2949f0cc40e2d543b33632d5134ae68dc5aa0987181ad3c8ee8860a3f

    • SSDEEP

      12288:fWy07xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6r2B:He9km6k/IwRYbiBeKGC/B

    Score
    1/10
    • Target

      bin/Monaco.html

    • Size

      6KB

    • MD5

      fc63d6f8cfd66d984df8e003cd30ce4c

    • SHA1

      767beb1b385f89ef98d6aab11abacc564fc3c2b7

    • SHA256

      aaf84c7789f9f4a7505c408e484d0d04a5ddfe2badd3973acd41bf2e6a2bfbf5

    • SHA512

      843bb9660de5827a28a94799c4b745bc2c1c56db72d36b989ea2b72a3868d0b68fac36b5e320293e26034e4d2b0f9b0946162ea2f4b8e919131d888a825e5101

    • SSDEEP

      192:Q3+OKFLvkJj7gpk32eynKZyt7TJPAqkvKU3LI+QrzZws:Y+OKFK3gi32eynAhs

    Score
    3/10
    • Target

      bin/MonacoEditor.html

    • Size

      6KB

    • MD5

      cff4feef176cef910036d01c653d9287

    • SHA1

      2ec40c7ea8d85a126c39f294d82cd128217c0b6a

    • SHA256

      3e06c186e632d01ebc2ef38fb0c082f26e14132697afe8750173f4a09569147a

    • SHA512

      f1d5707a947d1172cd8b06b8dec8cffd8ae88486c4a7a685ef88b8c619fee84efcf0cf5ec193c1f5b3dfcb3bf5aa74cb5ce89003d092d7414aadf2c2a6e5587d

    • SSDEEP

      192:Q3+OKFLvkJj7ppk32eynKZyt7TJPAqkvKU3LI+QrzZws:Y+OKFK3pi32eynAhs

    Score
    3/10
    • Target

      bin/vs/base/worker/workerMain.js

    • Size

      149KB

    • MD5

      27ead90c7702154755785e0e53398755

    • SHA1

      86b59485fe6f6ccb1805183fa75062a2ac1c859e

    • SHA256

      bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5

    • SHA512

      6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82

    • SSDEEP

      1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw

    Score
    3/10
    • Target

      bin/vs/basic-languages/bat/bat.js

    • Size

      2KB

    • MD5

      4cb475399c4490eea41982dcd6d9653e

    • SHA1

      fc97d57206ff7fa1c89ff0fc9f6e2f04a20ea185

    • SHA256

      9bca42394fe8922fec24b768eeb8ce04692de6fad82f9052d5b7e70f5c6b0f40

    • SHA512

      27eefe83cf38a7d784414d99b472f6fcd7e595691eb0f368254ba1f71aaf702840b62bf232c30c515a8fada234699fefeef496c0c24669cc158cb567227e4783

    Score
    3/10
    • Target

      bin/vs/basic-languages/coffee/coffee.js

    • Size

      3KB

    • MD5

      9d0c4ac1691eed0a480c3e9246490d29

    • SHA1

      38258864fd070c35cec6b68715d58771df9fe3e1

    • SHA256

      e706c9f8e5c5a0cb01b2f4e4879ec34a050d6eb2a8840284eb7badd9d78099f9

    • SHA512

      437a703607a9f0cb96ffb56312d149b95f596290591d14098c36d978b2e1fdba3c3712c9099923bc0a709c5c0ebd7eea868f63dfbcc69cdf5a9325b8a67006b6

    Score
    3/10
    • Target

      bin/vs/basic-languages/cpp/cpp.js

    • Size

      5KB

    • MD5

      0a16509e6cd0155fb622e785cfe976c7

    • SHA1

      7afa7f823191c43d7a4bdd7d91577495de62c21a

    • SHA256

      a7c2bea7ca3d9e203a3a286735945fe010c8f4f8d46620386ee8befc6a78b32b

    • SHA512

      2cbc48cb10c467561c6a84f59405e9c2f864640b3a21e6fe5cd14ad1a7ca5667b766b3c0511df26f28205dd17338a878bd1164a4f5875235a73214f3e4aeb49d

    • SSDEEP

      96:hFDMgRs/rbV1+gqVV1+/LVb9ZRC2seM6jjz13MwVcEghhb6Yw76wGcmvRBNIs:hZGrTOcVv5M61h8hSeiYL

    Score
    3/10
    • Target

      bin/vs/basic-languages/csharp/csharp.js

    • Size

      4KB

    • MD5

      f8f841d13c9220e15dcd6bc386b37ba2

    • SHA1

      2b8b7003820d19ed83afde98c845db5e3d5753f8

    • SHA256

      6b3be9a86ee8e3202f51745d94d24cc1eefbcf7d9e6d94fbaf70146b084e835f

    • SHA512

      0b167865b8d7847792c80144e83bdf33655db6ecc0934bb3290f8b5793fee8168aeaf9d74b3541a9424c4f180aad496c2d8710e3847a5bf9d4b2c960ddea4ae5

    • SSDEEP

      96:hFDMgRsVx+rbV1+gqGV1+hmQuq1cBh8b7gj8/pLxb6J994wGcKU7dYIkI:hZi+rTtPsRXpw9SiKUJGI

    Score
    3/10
    • Target

      bin/vs/basic-languages/csp/csp.js

    • Size

      1KB

    • MD5

      22ada25d590811dcff4e5f5d698e583b

    • SHA1

      c43d4846967d5037ef05b102e49d1fbc54e45fbc

    • SHA256

      4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789

    • SHA512

      c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189

    Score
    3/10
    • Target

      bin/vs/basic-languages/css/css.js

    • Size

      4KB

    • MD5

      49ad30f1151cfd7a74677fdc6dd13da9

    • SHA1

      286d47f0a4cfa26da2e4d1f1317a8c87000bb5fc

    • SHA256

      bd331fd3bd2c37b0c3150035325f163ac9266bf6d942310764815e676d856d91

    • SHA512

      7337706bfd5bd54938da0fba35e97f8e5780491c04b58d43fc6d905bd2dca92897f1ed8d48e42665f166da7684cc6e29a63ae73f8d3779a9feb97c397a642f0d

    • SSDEEP

      96:hFDMgRsozIq+q17qcq6V1+/aMj1cqTroIrqjKf8O3lzXY0Jc:hZzzv9VmjoOf8O39XbJc

    Score
    3/10
    • Target

      bin/vs/basic-languages/dockerfile/dockerfile.js

    • Size

      2KB

    • MD5

      e32de981bdaf75e6ffb8fe40bc955a68

    • SHA1

      bef1af7b26ea01c987c7a6295bb7192d83a32068

    • SHA256

      65b86fc54e9b35d6cb84f01dfb905680dbcad6605757de1d6bca84e3029889af

    • SHA512

      a3eadd8c1389dff6c2c6e595efff69be3a573d01e4e16b8e4a8b28f63e4c48c9c439b5dd93666d81d703d1c6b5bf927cc8e47d04af270128095f0d579407c2f4

    Score
    3/10
    • Target

      bin/vs/basic-languages/fsharp/fsharp.js

    • Size

      3KB

    • MD5

      de122b3bc44a8714f386dc80282dcb12

    • SHA1

      06888a9b616993e9af9797cec64c6d419065f2cb

    • SHA256

      1390079babc117d3f376735780d98f409f317eb4628d17106642c6933ea1da7f

    • SHA512

      ab48f2e5bfa6ea0024530141bb5d35b9090ee0254a3e8f8b86fa36cc8c2fca8000a3caafcfffc1d83e21c488e1f1990c91f537290b54fbbca1d3c7be090dfba5

    Score
    3/10
    • Target

      bin/vs/basic-languages/go/go.js

    • Size

      2KB

    • MD5

      5b4484c914cd97aff4510b803f2517ef

    • SHA1

      8f275ac36c57c4c464e30f92f525ffbd0fd436c6

    • SHA256

      46d1757c3cd3dbc3c7b465a338880144922a1c34c30e36f06ff2db8c2ff75b86

    • SHA512

      b34c64f9997f4b72760eca270d2a0c2e22d83467d3f0bc82e7c0e63d62d8f9d74a144a28d676a223cdefef417af723801ac0535375d0dd64bb3a81e87617fed0

    Score
    3/10
    • Target

      bin/vs/basic-languages/handlebars/handlebars.js

    • Size

      6KB

    • MD5

      3ca7cf83292b56444548f2914c0e1811

    • SHA1

      4be5b1adaa187d82a94967e6960d811acd700b93

    • SHA256

      31d25588d120e7c79f3332ff3b3c794cebd0554c7578e3bb37b3cac366e4f6c2

    • SHA512

      2d337b64def0d42f8bd6476cf31e806f67f77d26c95c68e75574fc310f7974852a810f8b197238559a2cb20d07914de5844481477321cdcb2c68c47da9088eb8

    • SSDEEP

      96:hFDMgRspITV1+/I/+B1BerJzlWK2BZwIBTIwbcdg6EHpf4Og6E8S6g6EB+FpAjE3:hZhbYbQRld2BZ1O0p4OE60+dMZLDs

    Score
    3/10
    • Target

      bin/vs/basic-languages/html/html.js

    • Size

      4KB

    • MD5

      630fa41f59a189aed68b4db82559de95

    • SHA1

      14a527d27240ba0effcfa43a5c46b9289e96b822

    • SHA256

      c717ac0701d3b1e22dc52a0c53608214297e5fab7bc7011cf4e964f2eca9d62f

    • SHA512

      e15c602788f13afd1e19e5f82de7a35eb9656950553bc3913205ba3e70ddf87199b7f9b358db7b7704efd3dc85029ad277692b6b84f5f549964b9dd7cce1ad60

    • SSDEEP

      96:hFDMgRsfInV1+/6mQVV1+HBwBRl0GSytHd6EHaK4T6Ef6EByyEhcKMgEQEJWf:hZLP+4+GLl0GSytHLaK4ccKM2

    Score
    3/10
    • Target

      bin/vs/basic-languages/ini/ini.js

    • Size

      1KB

    • MD5

      b9252b74381fe17565d494711f4c9093

    • SHA1

      9ed6a00a166c0b5abdbb3ea45fa7df3a5defc8ee

    • SHA256

      1f0feeae58c32f6e1f31b78f7e2aab3c91da387e464234c0f55ebff0e77444a2

    • SHA512

      2fe594de8ac3444223edc011cbd7f08a6f8ab2de2bf56919c2d6f1208e22391652d14549c3822c21c4999139ffce711fdbf00725e95aa01068bf5f223c3b8710

    Score
    3/10
    • Target

      bin/vs/basic-languages/java/java.js

    • Size

      3KB

    • MD5

      826546e08f178d68e8aa2ab29194c03a

    • SHA1

      444ed723cadc4231f2dce5c54597fa8558893d12

    • SHA256

      44be702cae05d5844dc1c452f9bd94020007b9e543a765db4e6649278607d218

    • SHA512

      8edb46eefaa3277374ba5dc656423115735573a57e82002745ce6112f666079d6ab7d9b5a79ed208ff51487e9ec2b757c45ec1b3c8119d8cbcd4f7cd30347ef9

    Score
    3/10
    • Target

      bin/vs/basic-languages/less/less.js

    • Size

      4KB

    • MD5

      696ef3dca27b4f9313deba6f99710154

    • SHA1

      d3b377cae3355c3facbecc85bb342d4af34436ca

    • SHA256

      ed8d1a9da4e62d1cffe4c83580c9df57d688e850a45ace72c11bdeb064520a16

    • SHA512

      f9f65f8730fac803cb01d127c467359f428dbcc8e368f40a15fd56b7150b2258e9c581c3a35712ccc2fcde8a7108c89a33b80cb72721fea663a11a553657dc29

    • SSDEEP

      96:hFDMgRsR6rMq+q17qcq6V1+/v+ufj1cCzBbu/2nOgeJamEulIHrraW4NUa:hZE6rr9PuhlzBbu4OLaDuKqW4NUa

    Score
    3/10
    • Target

      bin/vs/basic-languages/lua/lua.js

    • Size

      5KB

    • MD5

      8706d861294e09a1f2f7e63d19e5fcb7

    • SHA1

      fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23

    • SHA256

      fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42

    • SHA512

      1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f

    • SSDEEP

      96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE

    Score
    3/10
    • Target

      bin/vs/basic-languages/markdown/markdown.js

    • Size

      3KB

    • MD5

      caf4799639d5df40dfb1b979ed68af9c

    • SHA1

      6578ccc5111ddc190c354449be2630d91a21523b

    • SHA256

      eaaf453e0a9f9a604547e564a24e682503189cb9b85c87715bc9b5b6492b6f62

    • SHA512

      e787f3f849a40c608c3b35b732f16e4400c2d47e89ff309566afbc879fe37a7018722b959dc8ddc8c859d76e2f7bc0b85555cd27f7fc5e4d8e51e460ed32c9ca

    Score
    3/10
    • Target

      bin/vs/basic-languages/msdax/msdax.js

    • Size

      5KB

    • MD5

      eaa7bff8662633aec211d57fd17cb8ce

    • SHA1

      3d783a13339a5797fa701165484bbdb70ffc0616

    • SHA256

      6ab13356e083c4334e93d3167bdd17d02552508bfd11ea044c880af3a1dd94f9

    • SHA512

      b3c5069dd3b8b56c0c945cd36909e2d7b575d3b804714b724b7f80bf03de1983a29e33dce050ff599017ece4ce22dce1f01bddda7ae2d41b25779455b96f4c00

    • SSDEEP

      96:hFDMgRsHrviqgq+q17qU/E18Qby0qbmofEsl93Bjy2rzR9sJDJOuz3O+PYLq+v6I:hZmrTY8Ey0UJfEI9z+zz3O+PYLZy4axE

    Score
    3/10
    • Target

      bin/vs/basic-languages/mysql/mysql.js

    • Size

      14KB

    • MD5

      6482b3f16ca4f1436d5a5c9b54ab8956

    • SHA1

      bec1d967c0db6ca73cde65debd418f3e2c4db36c

    • SHA256

      7ba586bf9c623dc23f27a46e95a22342caa1f42d3b19fd9c018eb3b7298206dd

    • SHA512

      24b0dcb75254f4d69209d42bed81730c7c9ccac2230047a8fe46c81dab5a65618ce59be1b09100a1a2e42c515ea2a923a9c7084280bc567b2a6ee987cfb11039

    • SSDEEP

      384:hALxoDo1S36rNh/xkxnethQZZ62lANnY0k7N6AVzIAtSc2F9/0yW:SLxoDo1e4Nh/xNthQZZgNn67N6AVzIAp

    Score
    3/10
    • Target

      bin/vs/basic-languages/objective-c/objective-c.js

    • Size

      2KB

    • MD5

      3ba48944ccda06514bf9723a2308b4c8

    • SHA1

      e9ebac91264e0510f8ff80710244c3ce56aee1b4

    • SHA256

      35af39baf166f7c2e3c95345b10ec46aa523f98783daa745aef64503019e3253

    • SHA512

      b8b1096188bf3837a696353988c4bd1b21f1cbde54a9ce8436f139765189c5dc8ffb02ad931a364d4780fb7fbb7dc18a600cc19a5db3e1a412f38d7269a24030

    Score
    3/10
    • Target

      bin/vs/basic-languages/pgsql/pgsql.js

    • Size

      17KB

    • MD5

      7183810944428c812b3f9f4ed4adbb6d

    • SHA1

      5931e0e973678b836f548d11095b77398f7c38e5

    • SHA256

      a9487e85b74fd293c0131ae9bc181e72baecf5a0a6f8b71e97770d79332c09c0

    • SHA512

      a0eb6a021b24db38b98c7db1c5584bf190f789e5cb65fe13b7fb881fff1665cdaa7914556e0c0984f620b55b63a7b9f7902b706d596b2603e8720dc85dfa185f

    • SSDEEP

      384:hhLx5HtCBHHfrxrOmYbatR9uwX6l+qCVFQBTI7e9/asW:PLx5HtCBHHfrxrOmGaZKgKBTIuisW

    Score
    3/10
    • Target

      bin/vs/basic-languages/php/php.js

    • Size

      8KB

    • MD5

      fffc04cacea00100299900c7969e44dd

    • SHA1

      d15b7aff67d8fa813c43e35ac58ec08a74f4701b

    • SHA256

      af43769fa1bdef70da786c2296c3a5f91552163c78d5c8ede46620a146edda92

    • SHA512

      19dd22739eb9373a2b8f4acd7712d7631adf1cfbadbdec9dac2bda25e8594731ab30caa5cf2deb241c76429f8e381775b60ae5857e4ac6b735f493885c4dac6f

    • SSDEEP

      192:hZe+rrpRld2BZwd0C4Ov6f+AME/gujcm91wIJ3tjPq:hQ+rr7xPSVrgm91w+3t2

    Score
    3/10
    • Target

      bin/vs/basic-languages/postiats/postiats.js

    • Size

      8KB

    • MD5

      0c7a2538121071fd75d9f08806500ea3

    • SHA1

      968d9ee1b928cf62712ec69d5f02aeb025cc3623

    • SHA256

      e49fe4654ae374d12dc7a4cb210ba95f490982a014886ede88a0dad3fd99a760

    • SHA512

      ae39edd35bd9caa13c4e263910ce93375beadebbee846ef8d5e5da1d8f054e236ff3310e2938fcf3f9d1eefde1bbe03c20ddaad243a73f6249d8a1563f6afe67

    • SSDEEP

      192:hZCrsRJNHUKhfdGiAQ3Sv0vExaeZtSkgsv:hsrsbNHsQ3SMMYcF

    Score
    3/10
    • Target

      bin/vs/basic-languages/powershell/powershell.js

    • Size

      3KB

    • MD5

      25cbb67f273e62a6d0e6dd5c123f5963

    • SHA1

      81fcaf88c071e6b72648464f1bfdf8fc4fe8cca6

    • SHA256

      d47b6e2970b4bbcd0eb8e4ef69eb2052b117e36ab20c68605a1750ad5991eb51

    • SHA512

      94d265eb4e5c91abf3edac2cf17bb37b0402cae1dbfdf950c12c7b176bae89eda618286da5f51286d2ba684c4fd894dbc138ebdcf2a0b497bbf51be892a8606e

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

xwormdiscoveryrattrojan
Score
10/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

xwormdiscoveryrattrojan
Score
10/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10