General
- Target sysupdate.ps1
- Size 2KB
- Sample260426-ft7yjset5s
- SHA256 eb3047f280466a3a78b7fa07f49386d7d79c16ed2a425bab5af8a76f0eea754a
- MD5 3bc3647f8a2e9a63c8fefe44c31d9ece
- SHA1 bc459f0c7a0385199e7611c0dd9f8abd7fa7b5b7
- SHA512 f52c4170a3245f84bd17655b4d9a1f4f9da8af50009ce4219087b563f134348aa55257f5e604201c44e86c7af04e2bfee23500cee15901858d1475a4144e3d81
- TLSH T1585195B2B59111A44297EC638ACEE6857530D03F80A8380A3BDDC3E91F91768D3D879D
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
sysupdate.ps1
Resource
win10v2004-20260130-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
sysupdate.ps1
Resource
win11-20260130-en
3 signatures
900 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://discord.com/api/webhooks/1497640212459950292/FZvmRgW1DPbcmiyUMPWWNN73xCtKbq6Ie3pAF6_3uez2JmkBukppgkmgFfddo0o0bDAg
Targets
-
- Target sysupdate.ps1
- Size 2KB
- SHA256 eb3047f280466a3a78b7fa07f49386d7d79c16ed2a425bab5af8a76f0eea754a
- MD5 3bc3647f8a2e9a63c8fefe44c31d9ece
- SHA1 bc459f0c7a0385199e7611c0dd9f8abd7fa7b5b7
- SHA512 f52c4170a3245f84bd17655b4d9a1f4f9da8af50009ce4219087b563f134348aa55257f5e604201c44e86c7af04e2bfee23500cee15901858d1475a4144e3d81
- TLSH T1585195B2B59111A44297EC638ACEE6857530D03F80A8380A3BDDC3E91F91768D3D879D
- MD5 SHA1 SHA512 TLSH