Learning PowerShell: basic programs | Malwarebytes Labs
Tags
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Software - T1592.002 Powershell - T1086 Scripting - T1064 Scripting |
Common Information
| Type | Value |
|---|---|
| UUID | 72a609d7-4dbe-48c9-94c7-b979df6715d9 |
| Fingerprint | 6f8032f6cf3d0fb1 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 4, 2017, midnight |
| Added to db | Jan. 18, 2023, 8:33 p.m. |
| Last updated | Nov. 13, 2024, 12:36 a.m. |
| Headline | Learning PowerShell: basic programs |
| Title | Learning PowerShell: basic programs | Malwarebytes Labs |
| Detected Hints/Tags/Attributes | 25/1/14 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 149 | system.security |
|
| Details | File | 1 | comparison.html |
|
| Details | File | 2 | c:\users\public\desktop\comparison.html |
|
| Details | File | 1 | c:\certain\ceficates1.txt |
|
| Details | File | 1 | c:\certain\ceficates2.txt |
|
| Details | File | 1 | c:\certain\certificates2.txt |
|
| Details | File | 1 | c:\certain\certificates3.txt |
|
| Details | File | 1 | certificates.txt |
|
| Details | File | 3 | accesscontrol.reg |
|
| Details | File | 2 | c:\users\public\desktop\certificatesafter.txt |
|
| Details | File | 2 | c:\users\public\desktop\certificatesbefore.txt |
|
| Details | File | 1 | c:\certain\certificates1.txt |
|
| Details | File | 1 | c:\certain\certificates.txt |
|
| Details | File | 1 | certsfinal.ps1 |