malwarelearn
Home Learn Reports Tools Tags About
← Reports

Dropper

3048.ps1

Author
Moise Medici
Updated
13 Sept 2026 · Completed
Difficulty
Easy
Platform
Windows
Capabilities
Command Execution via Powershell Cmd BashIn-Process Shellcode ExecutionCommand and Control C2 CommunicationDropping Secondary Payloads
Tags
ps1shellcode

Appendix

  • 1 ↩ Microsoft: VirtualAlloc function
  • 2 ↩ Microsoft: CreateThread function
  • 3 ↩ Microsoft: WaitForSingleObject function
  • 4 ↩ Microsoft: delegates
  • 5 ↩ Microsoft: Memory Protection Constants
  • 6 ↩ Microsoft: InvokeItem function
  • Section 7 of 7: Appendix
    ← Indicators Of Compromise

    On this page

    File Info3048.ps1 Code Analysisstage2.ps1 Code Analysisstage3.bin Code Analysisstage2.ps1 Dynamic AnalysisIndicators Of CompromiseAppendix

    Type to search every report and article.