Overview

overview

10

Static

static

1

26032025_0...55.ps1

windows7-x64

3

26032025_0...55.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26032025_0256_5823c289a1455.ps1

  • Size

    10.5MB

  • Sample

    250326-drczaaznt7

  • MD5

    153b139f74bd9bfca8e5b4c3872e27dd

  • SHA1

    8ac6fe8510c51c828c2c7654ac23adfe3efa5e9a

  • SHA256

    5823c289a1455fc36302fc9ea4861c32dc022532a3294b307b8f46e7219ab530

  • SHA512

    cd4c47d94cc19fb54996ff7826a6467ed72e98ad851207be7189f4a7d312324bb4edf1e8142ca6d1c690b074fcc8e4f481c88f3f5aeaf17c0eacf2814cfffc9f

  • SSDEEP

    12288:kEzEDEGEOETEiEnE3EsExElEPeEPgEP+EPIEPjEPFEPXEPgEPvEP+EPt4EPtQEPx:/oYBZIlE0Xu6hrxzAisLExdB8q+cR

Score
10/10
agilenetexecution

Malware Config

Targets

    • Target

      26032025_0256_5823c289a1455.ps1

    • Size

      10.5MB

    • MD5

      153b139f74bd9bfca8e5b4c3872e27dd

    • SHA1

      8ac6fe8510c51c828c2c7654ac23adfe3efa5e9a

    • SHA256

      5823c289a1455fc36302fc9ea4861c32dc022532a3294b307b8f46e7219ab530

    • SHA512

      cd4c47d94cc19fb54996ff7826a6467ed72e98ad851207be7189f4a7d312324bb4edf1e8142ca6d1c690b074fcc8e4f481c88f3f5aeaf17c0eacf2814cfffc9f

    • SSDEEP

      12288:kEzEDEGEOETEiEnE3EsExElEPeEPgEP+EPIEPjEPFEPXEPgEPvEP+EPt4EPtQEPx:/oYBZIlE0Xu6hrxzAisLExdB8q+cR

    Score
    10/10
    executionagilenet

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks