Overview

overview

10

Static

static

1

700815a505...ml.ps1

windows10-2004-x64

10

700815a505...ml.ps1

windows10-ltsc_2021-x64

10

700815a505...ml.ps1

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    700815a50547b01b29cf3a1ca55d7a7e3058e7d911072018.html.ps1
  • Size 10.8MB
  • Sample250331-nltpysywfx
  • SHA256 9bde0fbcc81974a22c1c9c7d6fc7e73860a8f5cbf07ddd4a675fa2d0e25dca3d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
execution

Malware Config

Targets

    • Target
      700815a50547b01b29cf3a1ca55d7a7e3058e7d911072018.html.ps1
    • Size 10.8MB
    • SHA256 9bde0fbcc81974a22c1c9c7d6fc7e73860a8f5cbf07ddd4a675fa2d0e25dca3d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    execution

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks