master[.]zip | Triage

Submit
Reports

Overview

overview

Static

static

atera-scri...nt.ps1

windows7-x64

atera-scri...nt.ps1

windows10-2004-x64

atera-scri...rs.ps1

windows7-x64

atera-scri...rs.ps1

windows10-2004-x64

atera-scri...rs.ps1

windows7-x64

atera-scri...rs.ps1

windows10-2004-x64

atera-scri...rd.ps1

windows7-x64

atera-scri...rd.ps1

windows10-2004-x64

atera-scri...rt.ps1

windows7-x64

atera-scri...rt.ps1

windows10-2004-x64

atera-scri...DP.ps1

windows7-x64

atera-scri...DP.ps1

windows10-2004-x64

atera-scri...on.ps1

windows7-x64

atera-scri...on.ps1

windows10-2004-x64

atera-scri...rs.ps1

windows7-x64

atera-scri...rs.ps1

windows10-2004-x64

atera-scri...ue.ps1

windows7-x64

atera-scri...ue.ps1

windows10-2004-x64

atera-scri...ll.ps1

windows7-x64

atera-scri...ll.ps1

windows10-2004-x64

atera-scri...me.ps1

windows7-x64

atera-scri...me.ps1

windows10-2004-x64

atera-scri...ws.ps1

windows7-x64

atera-scri...ws.ps1

windows10-2004-x64

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

atera-scripts-master/000Install-AteraAgent.ps1

Resource

win7-20240708-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

atera-scripts-master/000Install-AteraAgent.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

atera-scripts-master/ActiveDirectory/Get-ADInactiveComputers.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

atera-scripts-master/ActiveDirectory/Get-ADInactiveComputers.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

atera-scripts-master/ActiveDirectory/Get-ADInactiveUsers.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

atera-scripts-master/ActiveDirectory/Get-ADInactiveUsers.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

atera-scripts-master/ActiveDirectory/Set-ADAccountPassword.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

atera-scripts-master/ActiveDirectory/Set-ADAccountPassword.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

atera-scripts-master/Atera/New-MachineAlert.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

atera-scripts-master/Atera/New-MachineAlert.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

atera-scripts-master/Networking/Enable-RDP.ps1

Resource

win7-20240903-en

evasion execution lateral_movement persistence privilege_escalation

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral12

Sample

atera-scripts-master/Networking/Enable-RDP.ps1

Resource

win10v2004-20241007-en

evasion execution lateral_movement persistence privilege_escalation

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral13

Sample

atera-scripts-master/Networking/New-L2TPVPNConnection.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

atera-scripts-master/Networking/New-L2TPVPNConnection.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

atera-scripts-master/Printing/Add-HPPrinters.ps1

Resource

win7-20241023-en

execution

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

atera-scripts-master/Printing/Add-HPPrinters.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

atera-scripts-master/Printing/Clear-PrintQueue.ps1

Resource

win7-20240708-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

atera-scripts-master/Printing/Clear-PrintQueue.ps1

Resource

win10v2004-20241007-en

execution persistence

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral19

Sample

atera-scripts-master/Software/Choco-Install.ps1

Resource

win7-20240903-en

execution

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

atera-scripts-master/Software/Choco-Install.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

atera-scripts-master/Software/Fix-SplashtopName.ps1

Resource

win7-20240729-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

atera-scripts-master/Software/Fix-SplashtopName.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

atera-scripts-master/Windows/Activate-Windows.ps1

Resource

win7-20241010-en

execution

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

atera-scripts-master/Windows/Activate-Windows.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

4 signatures

150 seconds

General

Target

master.zip
Size

17KB
MD5

aba11c18fdda9eb7f790cd0ef4dc351a
SHA1

38d9fb341732815811cccb1d96af988bdf081f30
SHA256

ffeab7e5fe1cdf9abc507fc7c528e712c375a2b924d6966b3b4fb6baf0079365
SHA512

dec7d8f789c0836a3c651ed7a0945632d41ccdd8f95d5d038960b639aa83690c142c87a383d0862c9b79ff5952279aef0b785219de70d559c9c92c9fb4cbde3d
SSDEEP

384:YHauf4CeEspR57qB2q4rQ3X/wtNXKxpFs6WLzl:Nmnwpvn/I4tNKHs6Kzl

Score

10^/10

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper

https://app.atera.com/api/v3

Extracted

Language

ps1

Source

URLs

ps1.dropper

https://chocolatey.org/install.ps1

Signatures

Files

master.zip
.zip
atera-scripts-master/000Install-AteraAgent.ps1
.ps1
atera-scripts-master/ActiveDirectory/Get-ADInactiveComputers.ps1
.ps1
atera-scripts-master/ActiveDirectory/Get-ADInactiveUsers.ps1
.ps1
atera-scripts-master/ActiveDirectory/Set-ADAccountPassword.ps1
atera-scripts-master/Atera/New-MachineAlert.ps1
.ps1
atera-scripts-master/CODE_OF_CONDUCT.md
atera-scripts-master/LICENSE.txt
atera-scripts-master/Networking/Enable-RDP.ps1
atera-scripts-master/Networking/New-L2TPVPNConnection.ps1
.ps1
atera-scripts-master/Printing/Add-HPPrinters.ps1
.ps1
atera-scripts-master/Printing/Clear-PrintQueue.ps1
atera-scripts-master/README.md
atera-scripts-master/Software/Choco-Install.ps1
atera-scripts-master/Software/Fix-SplashtopName.ps1
atera-scripts-master/Windows/Activate-Windows.ps1