Overview

overview

10

Static

static

10

ps1001.ps1

windows7-x64

8

ps1001.ps1

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ps1001.ps1

  • Size

    785KB

  • Sample

    241122-j69vfsxlcs

  • MD5

    5996b2aa1d6b234a48ed62f1ecaae159

  • SHA1

    4f6e56e34d7da66cb1f9b9ebc707f7fd01764352

  • SHA256

    100a4c16630356774d7ebee6681d40279fcb4ceabccf194d371af739ca98ce53

  • SHA512

    6d74c8bd7f52fedf55068a58cca93ce30582517a40d556b07c3f3ec3d5f17283b2cc7852601331bd77d1a3fd8f09b2f3cc6ebd7a2c6fa8a34cee45363eb80d0f

  • SSDEEP

    12288:8ppYXT60Mv5a8kebcetZ3Aq74GA19Td1JplTmu5jP+D/43EeI1gZEtd14Q2f3Nug:fXWZ5Pbcq92zjP+sjI10+r4Q21ug

Score
10/10
execution

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

http://habarimoto24.com/nh
exe.dropper

http://fenett2018.com/dobgx
exe.dropper

http://eastend.jp/bl5kfa
exe.dropper

http://bemnyc.com/u8erijeq
exe.dropper

http://abakus-biuro.net//a9zqemm
exe.dropper

http://yourmother4cancer.info/Nereidae/ZdDZ/umping?HGn3Nw=1932-05-23

Targets

    • Target

      ps1001.ps1

    • Size

      785KB

    • MD5

      5996b2aa1d6b234a48ed62f1ecaae159

    • SHA1

      4f6e56e34d7da66cb1f9b9ebc707f7fd01764352

    • SHA256

      100a4c16630356774d7ebee6681d40279fcb4ceabccf194d371af739ca98ce53

    • SHA512

      6d74c8bd7f52fedf55068a58cca93ce30582517a40d556b07c3f3ec3d5f17283b2cc7852601331bd77d1a3fd8f09b2f3cc6ebd7a2c6fa8a34cee45363eb80d0f

    • SSDEEP

      12288:8ppYXT60Mv5a8kebcetZ3Aq74GA19Td1JplTmu5jP+D/43EeI1gZEtd14Q2f3Nug:fXWZ5Pbcq92zjP+sjI10+r4Q21ug

    Score
    8/10
    execution

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks