Overview

overview

8

Static

static

1

windows-im...xe.ps1

windows10-2004-x64

3

windows-im...xe.ps1

windows11-ltsc_2024-x64

3

windows-im...st.ps1

windows10-2004-x64

3

windows-im...st.ps1

windows11-ltsc_2024-x64

3

windows-im...st.ps1

windows10-2004-x64

3

windows-im...st.ps1

windows11-ltsc_2024-x64

3

windows-im...st.ps1

windows10-2004-x64

3

windows-im...st.ps1

windows11-ltsc_2024-x64

3

windows-im...��.vbs

windows10-2004-x64

8

windows-im...��.vbs

windows11-ltsc_2024-x64

8

windows-im...��.ps1

windows10-2004-x64

3

windows-im...��.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    windows-image-format-converter-v1.0.0-source-candidate.zip
  • Size 21KB
  • Sample261107-2sdtzagv2l
  • SHA256 168bfe0dfdb9a726303446d4ec6979613b07b08ee7c250ad7191f6501974a3c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
execution

Malware Config

Targets

    • Target
      windows-image-format-converter-v1.0.0-source-candidate/build/Build-Exe.ps1
    • Size 2KB
    • SHA256 9621987e82499b220102a1a342a6d85bd5fb75e2f26c0f0c01f4197df382dc96
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      windows-image-format-converter-v1.0.0-source-candidate/tests/ImportCountTest.ps1
    • Size 3KB
    • SHA256 d57709bcf7dda0e6c12912101058fc6cadca8811b38676b89812698bd38ac156
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      windows-image-format-converter-v1.0.0-source-candidate/tests/PackageTest.ps1
    • Size 2KB
    • SHA256 13078d75af03f84d123e7b7215e2999dab13e8c5fb1b98e8a82fa8d1dfc0a8dd
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      windows-image-format-converter-v1.0.0-source-candidate/tests/SmokeTest.ps1
    • Size 4KB
    • SHA256 4be00d0d54b71e8934158bc49c9523e092677b890663e7d0b985942b76d1e273
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      windows-image-format-converter-v1.0.0-source-candidate/啟動圖片格式轉換器.vbs
    • Size 626B
    • SHA256 df090fd92914a1d4a31388cc3020ea78e6516881b0c2ecb1810157efdde24b39
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral10behavioral9
    • Target
      windows-image-format-converter-v1.0.0-source-candidate/圖片格式轉換器.ps1
    • Size 13KB
    • SHA256 6b0c79d4058b826ce91ecfc211b84a0cb5c41f3ac810793545cdacc60965fdbb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks