General

  • Target
    run.ps1
  • Size 769B
  • Sample260707-smlsysf12w
  • SHA256 5fdacb9486fdff75d5b5039e4f2401ace4bf4cfc4e310ce41141acaa71157c72
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • ps1.dropper

    https://signindat.com/payload.bin

Targets

    • Target
      run.ps1
    • Size 769B
    • SHA256 5fdacb9486fdff75d5b5039e4f2401ace4bf4cfc4e310ce41141acaa71157c72
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

MITRE ATT&CK Enterprise v16

Tasks