General

  • Target

    ollamainstall.ps1

  • Size

    2KB

  • Sample

    240927-t4h9ts1gnj

  • MD5

    fcd9661f3cc251160ba060cf7e4acaf9

  • SHA1

    0826ac6234e621492a070a1b94fbea8614ac1739

  • SHA256

    49e97d461fe12443dea26809f0b0f300f10469df085045bc9b8c1e0b8ed8465b

  • SHA512

    6780a6d05ac220ed67b95ae71433085a425270105d84f5baf1ba2dba06607c82d828e6240c72e115fe150da118c92bb2df97fd503e300b50a8d499bf1d794dae

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://ollama.com/download/OllamaSetup.exe

exe.dropper

http://45.148.120.191:6969/CRYPTBASE.zip

Targets

    • Target

      ollamainstall.ps1

    • Size

      2KB

    • MD5

      fcd9661f3cc251160ba060cf7e4acaf9

    • SHA1

      0826ac6234e621492a070a1b94fbea8614ac1739

    • SHA256

      49e97d461fe12443dea26809f0b0f300f10469df085045bc9b8c1e0b8ed8465b

    • SHA512

      6780a6d05ac220ed67b95ae71433085a425270105d84f5baf1ba2dba06607c82d828e6240c72e115fe150da118c92bb2df97fd503e300b50a8d499bf1d794dae

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks