Overview

overview

10

Static

static

10

getup.ps1

windows7-x64

8

getup.ps1

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    getup.txt
  • Size 600B
  • Sample241106-tyslbatgnq
  • SHA256 a6551e64881fee58dfae6933201b3c551e389db60446b69d0510cf9a9ff3664f
  • MD5 SHA1 SHA512
Score
10/10
discoveryexecution

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    https://zip-store.oss-ap-southeast-1.aliyuncs.com/updated%20file/getup.zip

Targets

    • Target
      getup.txt
    • Size 600B
    • SHA256 a6551e64881fee58dfae6933201b3c551e389db60446b69d0510cf9a9ff3664f
    • MD5 SHA1 SHA512
    Score
    8/10
    executiondiscovery

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks