General
- Target malwa.ps1
- Size 2KB
- Sample260424-ngckwagy6m
- SHA256 c338f9bf85a973feea19d303c87457ac511a972d8c274bfb55902d76f9aa5d89
- MD5 b2cfd4a05312f3e3a1a1829e6549e383
- SHA1 231838bd529851d7d319cd09da17b04239a3426f
- SHA512 1cf8b280e48c82848f8102dbcb4bd9df7e0c8202aa19cb28b3e1ac7e24a6c6dd85ecf2d394df5364200a030cafca1b61093588a9e460a96d7a46b341594696ae
- TLSH T12151B41ED26602A144A313BD4D4AAFA8796FA0BF418B6FC0787C9140EF6613D4F757CA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
malwa.ps1
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://i.imgur.com/s7OLx81.jpeg
Targets
-
- Target malwa.ps1
- Size 2KB
- SHA256 c338f9bf85a973feea19d303c87457ac511a972d8c274bfb55902d76f9aa5d89
- MD5 b2cfd4a05312f3e3a1a1829e6549e383
- SHA1 231838bd529851d7d319cd09da17b04239a3426f
- SHA512 1cf8b280e48c82848f8102dbcb4bd9df7e0c8202aa19cb28b3e1ac7e24a6c6dd85ecf2d394df5364200a030cafca1b61093588a9e460a96d7a46b341594696ae
- TLSH T12151B41ED26602A144A313BD4D4AAFA8796FA0BF418B6FC0787C9140EF6613D4F757CA
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Sets desktop wallpaper using registry