General
- Target falsepositive.ps1
- Size 253KB
- Sample260424-2kl6daew3j
- SHA256 f825a78f294e7296b13a590ca7c4b857f4fbe596fd1da44b4e7e4bd356abaa43
- MD5 a315baa11b0cae78f52189e7b61eb336
- SHA1 8dc6a0463291180933e1cd43916c53336cfb3a60
- SHA512 d4fcb06e9a32d13a1a996ebd2a9c8c072dfc5f06684b1b15d972231e71caa755df7d809beca2305f629349a8c4c21014dd8e505bd2aa1238dc13638b6583740d
- SSDEEP 1536:4XtDhC8pwLWz7bhynW0ncAmJEjJetAUaXtA:43CiwLWz7bhyn7nxnjwtMK
- TLSH T11F444126FDC75C6783C39B63D2E3D21CBE7984AC850B9EC4B9B8C2825861D691749F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
falsepositive.ps1
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
falsepositive.ps1
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target falsepositive.ps1
- Size 253KB
- SHA256 f825a78f294e7296b13a590ca7c4b857f4fbe596fd1da44b4e7e4bd356abaa43
- MD5 a315baa11b0cae78f52189e7b61eb336
- SHA1 8dc6a0463291180933e1cd43916c53336cfb3a60
- SHA512 d4fcb06e9a32d13a1a996ebd2a9c8c072dfc5f06684b1b15d972231e71caa755df7d809beca2305f629349a8c4c21014dd8e505bd2aa1238dc13638b6583740d
- SSDEEP 1536:4XtDhC8pwLWz7bhynW0ncAmJEjJetAUaXtA:43CiwLWz7bhyn7nxnjwtMK
- TLSH T11F444126FDC75C6783C39B63D2E3D21CBE7984AC850B9EC4B9B8C2825861D691749F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.