Overview

overview

8

Static

static

3

PowershellScanner.exe

windows10-2004-x64

8

PowershellScanner.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    PowershellScanner.exe
  • Size 124KB
  • Sample260803-mfm5jsgp3t
  • SHA256 9d31cb8b0352d4a54c09dbc4df400649568776d7e83e551b1c6368ed4a73cf27
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryinstallerspywaretrojan

Malware Config

Targets

    • Target
      PowershellScanner.exe
    • Size 124KB
    • SHA256 9d31cb8b0352d4a54c09dbc4df400649568776d7e83e551b1c6368ed4a73cf27
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryinstallerspywaretrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Probable phishing domain

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks