Overview

overview

8

Static

static

1

run.ps1

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    run.ps1
  • Size 39B
  • Sample261102-zedwpsc17w
  • SHA256 5a768dc4ad8d869e57c1be1a2b9a0d50852321f7553c566b140bc9dabc47a1ea
  • MD5 SHA1 SHA512
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      run.ps1
    • Size 39B
    • SHA256 5a768dc4ad8d869e57c1be1a2b9a0d50852321f7553c566b140bc9dabc47a1ea
    • MD5 SHA1 SHA512
    Score
    8/10
    discoveryexecution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks