PS1 — Malware Profile

PS1 is a loader that was used to deploy 64-bit backdoors in the CostaRicto campaign.

MITRE ATT&CK techniques (5)

• T1027.013 Encrypted/Encoded File
• T1055.001 Dynamic-link Library Injection
• T1059.001 PowerShell
• T1105 Ingress Tool Transfer
• T1140 Deobfuscate/Decode Files or Information

Read the full analysis on IntelFusions