General

  • Target

    script.ps1

  • Size

    1KB

  • MD5

    44b6f4aa8768e9628adb4f50961a6be2

  • SHA1

    20964d7c8397c3a56821182fd6c1d426d2513fbe

  • SHA256

    c89a2ecf7b0776d2e7ee6974b11765a8e90e3ea4f903835053366954c4dbbe60

  • SHA512

    b69ce3f9f6fd0585936796862f51f309511400543285fc35eddcbec034612a511f84bbb8dac6f831ba44dea2dcd5a95e3ba483bf7fb4554b82192ccd36ebeccf

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://093-up-r.jotta.cloud/files/v1/dl/eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..6qIf4XOjfmGHJk4JenudYQ.jT47eezZSpCBBFPGFoX3b-xHtf_KH7qrFUZh87ymUK0N8qtSAJCDoW2gU1NKYgqTU1Am_4jALF-cjGu-fvYI1OB4TYQ5ikA1XuJw-hh7zTITvOqKPQxpPqGOLOAOUyOwuhGMZKXoZ9klCVN910uCmwqweYaP7HUSQpX5faC96h40K7WIg3LXP6VCH1PsoUb5ZBX6r0r0s6OCkxmqe28ks8TNc4n8jV8M7zMeQEeU67qqNGyIrA71KDuP8fbSB4Ll4O_vhIs7ed1cyGL6o4XWyA.valiZbtwoYqvQX8SiytyVQ?access_token=eyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84ZWU0ZmM0YzA1MDc0ODZiYjVhMmU4ZTcyZDhhN2UiLCJzdCI6IkNpQndYemhsWlRSbVl6UmpNRFV3TnpRNE5tSmlOV0V5WlRobE56SmtPR0UzWlJJQ0NBRWFKUm9qTXpjeE9XRmxaV1V5WVdOaE1HRXhORFJsT1dJek9UVmhNemd4WW1Jd09ETmtNVFU9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MzIxOTMzNjcsInVzZXJuYW1lIjoicF84ZWU0ZmM0YzA1MDc0ODZiYjVhMmU4ZTcyZDhhN2UifQ.DSrZyuj3rHbEqOyha75kVNlyJA477O8UOACaQC-QV8TzABgDcHLp0QVfJ90b_NHro7XDCJmy_XAZqxB1RiCUT_J6HjtQVuXPypjxaA0qWWXmTA0FehHq7Q2v9GFGT5nIwFvNuMMISw9oK3U1HAIOcS7P-3tqgkO4It9FoAWlCd9ODEVop9UF2_BXsrtzH1loLSKawSKbXPbIBBA9qzf4XsOR61pqWKKe4X3EnSy2M0ezhGRnKbJblgX-097_ecAKSDMwVGE_LmLuuezvhsyWWYKp3yw5Jxwix3oMkzfOmZ5pX4yo8-x5UQZ6kKFZ0Sx32nDQg5oCuP_DA4szUfSvqQ

Signatures

Files

  • script.ps1
    .ps1