General
- Target t60CyMYX.ps1
- Size 8KB
- Sample260426-s53jesdx6p
- SHA256 3b2aee87e7394d0dcd5e96ecccf1c2bad7380a2d14534cb19cd4a4d54d359b0a
- MD5 f9bd41f080388ff8affc882d0b55ac22
- SHA1 cad39a6e93c75539c0893b951cfef5ba8deb2226
- SHA512 97f19ef31c4b3c033e2d5fd1bbce875f7c6e7d6949643ddafb7b08fba5cb768a886564216ae9aa87a4f8d21fa39ef480f0d139a410054385cb21592833b352af
- SSDEEP 192:gN36Snx6Ezc7damkWzl+fTIjr5eInHtP/zITImgpzn:Cx6EOlR/9Fn
- TLSH T17102B6213406A864C3B37F3A85EBB274FAA711BF62261144B4EC91D5BFB0D64D335E98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
t60CyMYX.ps1
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
t60CyMYX.ps1
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target t60CyMYX.ps1
- Size 8KB
- SHA256 3b2aee87e7394d0dcd5e96ecccf1c2bad7380a2d14534cb19cd4a4d54d359b0a
- MD5 f9bd41f080388ff8affc882d0b55ac22
- SHA1 cad39a6e93c75539c0893b951cfef5ba8deb2226
- SHA512 97f19ef31c4b3c033e2d5fd1bbce875f7c6e7d6949643ddafb7b08fba5cb768a886564216ae9aa87a4f8d21fa39ef480f0d139a410054385cb21592833b352af
- SSDEEP 192:gN36Snx6Ezc7damkWzl+fTIjr5eInHtP/zITImgpzn:Cx6EOlR/9Fn
- TLSH T17102B6213406A864C3B37F3A85EBB274FAA711BF62261144B4EC91D5BFB0D64D335E98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops startup file
-
Adds Run key to start application
-
Hide Artifacts: Hidden Window
Windows that would typically be displayed when an application carries out an operation can be hidden.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1