Extracted

• • Target
    8a35709b785162abc526c2d042d720747226adc38cdfdce93c4f177d121fcbc2.ps1
  • Size 18KB
  • SHA256 8a35709b785162abc526c2d042d720747226adc38cdfdce93c4f177d121fcbc2
  • MD5 058c3d8ef8836d440e87ff61889371e4
  • SHA1 1c6537d912c921286188242de587caf4672c4e6e
  • SHA512 7f9e0ad9f3803321d80e9552473423d1eb9b56ceff731d4be4114c29b6c140627e8724126af3e9e4baf6f43a9d5db548e6db079a49b836715ff74414b7d2859a
  • SSDEEP 384:HnfzJNaGgwhwizVcWncaHSCIZMoLguv5LVAL:t+whwwV1caHGMoLguBLVAL
  • TLSH
    T13882E905376540B7028762E989CDE20CA728822F21491D51B8DCC7C6FFA297E93F96F9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  discoveryexecutionpersistence

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2