General
-
Target
ollamainstall.ps1
-
Size
2KB
-
Sample
240927-t4h9ts1gnj
-
MD5
fcd9661f3cc251160ba060cf7e4acaf9
-
SHA1
0826ac6234e621492a070a1b94fbea8614ac1739
-
SHA256
49e97d461fe12443dea26809f0b0f300f10469df085045bc9b8c1e0b8ed8465b
-
SHA512
6780a6d05ac220ed67b95ae71433085a425270105d84f5baf1ba2dba06607c82d828e6240c72e115fe150da118c92bb2df97fd503e300b50a8d499bf1d794dae
Static task
static1
Behavioral task
behavioral1
Sample
ollamainstall.ps1
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ollamainstall.ps1
Resource
win10v2004-20240802-en
Malware Config
Extracted
https://ollama.com/download/OllamaSetup.exe
http://45.148.120.191:6969/CRYPTBASE.zip
Targets
-
-
Target
ollamainstall.ps1
-
Size
2KB
-
MD5
fcd9661f3cc251160ba060cf7e4acaf9
-
SHA1
0826ac6234e621492a070a1b94fbea8614ac1739
-
SHA256
49e97d461fe12443dea26809f0b0f300f10469df085045bc9b8c1e0b8ed8465b
-
SHA512
6780a6d05ac220ed67b95ae71433085a425270105d84f5baf1ba2dba06607c82d828e6240c72e115fe150da118c92bb2df97fd503e300b50a8d499bf1d794dae
Score8/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-