General

  • Target
    zScripts-main.zip
  • Size 149KB
  • Sample260806-plxmaahf65
  • SHA256 7c247e10b6d7bae6789630b2ae642a30757fc34925d7b731b7cacabd75c1d38e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://download.sysinternals.com/files/ProcessMonitor.zip

  • exe.dropper

    https://download.sysinternals.com/files/ProcessExplorer.zip

Targets

    • Target
      zScripts-main/BlankStartMenuIcons.ps1
    • Size 784B
    • SHA256 50cab1ff2b7b4b9a0c5cc34bd31e88fd54edc33e499c71106c6b47facab5f0c2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      zScripts-main/CheckPerf.ps1
    • Size 1KB
    • SHA256 d681e7175495c6ae029a1facce13fb2c36b164768295af2a2ef9c703a70eb5b6
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    • Target
      zScripts-main/DeviceManagerPowerSaving.ps1
    • Size 864B
    • SHA256 a4be9ff0328a7a5f81f7947c85324d0c2e10e863cbd2391c48b14bc15d88772c
    • MD5 SHA1 SHA512 TLSH
    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

    • Target
      zScripts-main/Disable-AppActions.ps1
    • Size 4KB
    • SHA256 492549f8d32f3a318aedca98b5e27eb3f809dbae8796b7cafedfc3ee40278354
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      zScripts-main/Download-AmdDriver.ps1
    • Size 694B
    • SHA256 12ab9bcb336e80c3e8e9a1b96efc6d144ba28df69a1fe3b9d44f4f8f3be55948
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    • Target
      zScripts-main/Download-AppxPackage.ps1
    • Size 35KB
    • SHA256 ad7caa7102df8019c874f4888d545845753928f04dc29f3f96ac3f89a7c3b502
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      zScripts-main/EnableLoudnessEQ.ps1
    • Size 3KB
    • SHA256 4b29d773c89a8ae88711905c176cc45d91eff7eecc109e24d969118cd3ad6c28
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      zScripts-main/EnableUblockChrome.ps1
    • Size 1KB
    • SHA256 cca05197b0336048db287731ab554b7928cd04e233050ce885746d1d4087e099
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      zScripts-main/ExportDrivers.ps1
    • Size 3KB
    • SHA256 7917221851c6ee9719ee320c28fe8dd26eba3c4db38a52bb7fab608041f5d82b
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target
      zScripts-main/ExportWallpapers.ps1
    • Size 3KB
    • SHA256 f7d5f056619343b4d9158cc234bed9ba0a7e4b17dac1ec6d11e655fa64bd550d
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Drops desktop.ini file(s)

    • Target
      zScripts-main/FixDiscordLocation.ps1
    • Size 2KB
    • SHA256 dc98a307d81de60f8fd19309e26cfe2fb3e0aa7609dacdffb7299ae07277ebca
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      zScripts-main/GameMode.ps1
    • Size 6KB
    • SHA256 e9fe10402d50d048caa410a2b1f7c6512369f1d5522f1db877c1704254a81506
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      zScripts-main/Get-TeleDomains.ps1
    • Size 723B
    • SHA256 df03bd1bd6547d0e60d83c573df79583d9eed090f55496b342517592ee7fb49a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      zScripts-main/ModernFilePicker.ps1
    • Size 3KB
    • SHA256 050e12963f24accb678178e02182656840421b19f0366afce22324bd3a51bbc3
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      zScripts-main/RegAPIWrapper.psm1
    • Size 12KB
    • SHA256 566aabe99fd5bc41fe8ab17e977030818dc8d82443e9b80eb4f45cadde5de8df
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      zScripts-main/RemoveAppsPolicyEditor.ps1
    • Size 8KB
    • SHA256 99e36eb4abcd62eacea73f6c0c8f63689dd21925462960c7b3dc9e3a223a51a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
4/10

behavioral4

execution
Score
4/10

behavioral5

executionpersistence
Score
6/10

behavioral6

executionpersistence
Score
6/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
8/10

behavioral10

execution
Score
8/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
7/10

behavioral18

execution
Score
4/10

behavioral19

execution
Score
6/10

behavioral20

execution
Score
6/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10