Extracted

• • Target
    jensydesign.com.ps1
  • Size 18KB
  • SHA256 ec39ccc54182ff595b683f542d08951a62b765bf6efa8d59dc5ae16ec7d27bae
  • MD5 958f7e9a8cdb70babd1eedcd6ada51ed
  • SHA1 4052d7642f5f95841290e67ba7ad5f20483baa7c
  • SHA512 a310e6db9ab89c579c694fad32e6546501557666b7e1dc825206fb70fe1c4b179400ffba2c27f53450a4f85e4caccc90df7237b87884f21aa247e617f372a838
  • SSDEEP 192:Zcidd1hgPbdiAEpbmkbehbnvAGbzNXF4/b4bGAxvmAQFJDbSIDKSIxF9tGCTyzH8:cRnO4YJnD0QCkDwoLgmg+DQN//3
  • TLSH
    T1BF82B51273F5485706831695E2CED30DAA29426B40966EA0BCDCD385FF7352B83F97E4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  discoveryexecutionpersistence

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2