Overview

overview

10

Static

static

1

pcalua_lolbin_cf.ps1

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    pcalua_lolbin_cf.ps1
  • Size 104B
  • Sample260803-psttzahe44
  • SHA256 00c660915d2de1d676b8c35774fe21be74e22c5d43047d740a8533c0f88277ec
  • MD5 SHA1 SHA512 TLSH
Score
10/10
adwarediscoveryexecutionspyware

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://fine-work-team(dot)com/6272

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://fine-work-team.com/6272

Targets

    • Target
      pcalua_lolbin_cf.ps1
    • Size 104B
    • SHA256 00c660915d2de1d676b8c35774fe21be74e22c5d43047d740a8533c0f88277ec
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    adwarediscoveryexecutionspyware

    • An obfuscated cmd.exe command-line is typically used to evade detection.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks