Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
19/05/2026, 08:46
Behavioral task
behavioral1
Sample
test-main/file.ps1
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
test-main/file.ps1
Resource
win11-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
test-main/nigga.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
test-main/nigga.exe
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target test-main/nigga.exe
- Size 1.2MB
- Sample260519-kpsehsdt5j
- SHA256 71a7d0004e317f6787844347acdf4c910938820fd3f5476f6bd4bd7aeca34273
- MD5 a82e020ef218e0682f80ab3045ecfc06
- SHA1 4baacc6946988eb9fd552a627fc5c4f21067ebe8
- SHA512 2adc8616336409987781c5c7fbe262a28c458e11eaca589c46528d8ffb78c12b945088f189d29ca3e3c8fead4472940f5cfa712cde2eb4698bc47786fbead597
- SSDEEP 12288:NXH1DLdp3T9dZBTYRNY3EfxnXxM3dsRSiXhkypdQwcmemqvw9E8:jLdp3T9jd3dsROypdQwc/I9E
- TLSH T14A55A54BE7B611D1F4BAC139A562322AFC7234A58738D7D792859A0E5B30FE4AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 33 raw.githubusercontent.com 29 raw.githubusercontent.com