Overview

overview

10

Static

static

1

aa.txt

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    aa.txt
  • Size 1KB
  • Sample260810-asggbayakd
  • SHA256 42d08b7f621367839666add9a024856c3bd246ff4e0e7a0a090663c974406d09
  • MD5 SHA1 SHA512 TLSH
Score
10/10
executionpersistenceransomware

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    http://172.31.107.54:8080/r3DvWqs/3TCrEe
  • ps1.dropper

    http://172.31.107.54:8080/r3DvWqs

Targets

    • Target
      aa.txt
    • Size 1KB
    • SHA256 42d08b7f621367839666add9a024856c3bd246ff4e0e7a0a090663c974406d09
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    executionpersistenceransomware

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Suspicious clipboard content.

      A suspicious script was copied to clipboard.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks