General

  • Target

    sample

  • Size

    3KB

  • MD5

    21c010cf4481df82d7e5e4a0b4260793

  • SHA1

    d2ae87b41aa4e951c3a3131ce7ebc8969948ed97

  • SHA256

    b6e7e1ddaceee8c401056c0bd2e552c3545f6906b7de4b62ab3a239e5b01dfa7

  • SHA512

    8f97b34ecda980b0a738d98a99a28ba6f6ceafe65ae97f41b0fc8561a919796e729429507a18e9fe0ef79feb6ee892afb29fc325615c920d72111f3649b3bf5f

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://jacrcell.com/joomla/crypted.exe

exe.dropper

https://installsh.pages.dev/config.ps1

Signatures

Files

  • sample
    .ps1