General
- Target win64.ps1
- Size 1KB
- Sample260423-pgmaraby4q
- SHA256 e8c4ec795a14587d3b3ce34b73eca090ea9d9957fb612300abc6239ec293eb26
- MD5 85a1e1c0cc3b9f043dbacfff56335607
- SHA1 ac4cb655a78a5634f6a87c82bec33a4391269a3f
- SHA512 9531d8b59be82c3ac2b05d4a2831bd75c4a8f09e1e3c58a900aa323a9b942829afcc066c406089baafda7f55269f9b46216c503cee487ac5b2cf56dab4df1dbb
- TLSH T1DF21D322FC75D2605629971CB63B3084243245B719516E04F3FD52A89F96F64C3EF25B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
win64.ps1
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
win64.ps1
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://dl-cli.pstmn.io/download/latest/win64
Targets
-
- Target win64.ps1
- Size 1KB
- SHA256 e8c4ec795a14587d3b3ce34b73eca090ea9d9957fb612300abc6239ec293eb26
- MD5 85a1e1c0cc3b9f043dbacfff56335607
- SHA1 ac4cb655a78a5634f6a87c82bec33a4391269a3f
- SHA512 9531d8b59be82c3ac2b05d4a2831bd75c4a8f09e1e3c58a900aa323a9b942829afcc066c406089baafda7f55269f9b46216c503cee487ac5b2cf56dab4df1dbb
- TLSH T1DF21D322FC75D2605629971CB63B3084243245B719516E04F3FD52A89F96F64C3EF25B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.