HKTL_POWSCRN.GA

June 22, 2017

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Joselyn Canuela

---

 ALIASES:

Trojan.PowerShell.Spy (Ikarus), PowerShell/Spy.Agent.E (ESET-NOD32)

 PLATFORM:

Windows

 OVERALL RISK RATING:

 DAMAGE POTENTIAL:

 DISTRIBUTION POTENTIAL:

 REPORTED INFECTION:

 INFORMATION EXPOSURE:

• 
  Threat Type: Hacking Tool
• 
  Destructiveness: No
• 
  Encrypted:
• 
  In the wild: Yes

  OVERVIEW

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

738 bytes

File Type:

PS1

Initial Samples Received Date:

06 Dec 2016

Arrival Details

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other Details

This Hacking Tool does the following:

• It is a powershell script that captures screenshot of the active desktop and saves it to the specified file path.