General
- Target start.ps1
- Size 608KB
- Sample260529-w4dqfsey7n
- SHA256 b6e50ad9c7568b292a8350fc364b6a13bc4162341f70a2ca09be941f4d0ffa51
- MD5 8f4a6e3e799375957d12779498ff62de
- SHA1 db63b9749369cc6593fb59a99e3ff1d0d0d55412
- SHA512 8a56fabe8853e225db42de8001374c818c858afaada2e10109ce703557ff633fe37bf07218e138ad4f1636b3f7721dc4353c4fde7cbf565442a565e5bc43d234
- SSDEEP 6144:ThFXR3Gx+HihHQ8ntYrcWHn+CqZxw77oYW6zVHTYWId4W7b5oAIsU7J+ZNJ0sh:ThbG++HSdqUk4li5jWN+Zh
- TLSH T15BD46D747A062EFF5BBC10C248C5C11C563822B5CA682CF56ACB5CA3391D77A27B79B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.ps1
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 608KB
- SHA256 b6e50ad9c7568b292a8350fc364b6a13bc4162341f70a2ca09be941f4d0ffa51
- MD5 8f4a6e3e799375957d12779498ff62de
- SHA1 db63b9749369cc6593fb59a99e3ff1d0d0d55412
- SHA512 8a56fabe8853e225db42de8001374c818c858afaada2e10109ce703557ff633fe37bf07218e138ad4f1636b3f7721dc4353c4fde7cbf565442a565e5bc43d234
- SSDEEP 6144:ThFXR3Gx+HihHQ8ntYrcWHn+CqZxw77oYW6zVHTYWId4W7b5oAIsU7J+ZNJ0sh:ThbG++HSdqUk4li5jWN+Zh
- TLSH T15BD46D747A062EFF5BBC10C248C5C11C563822B5CA682CF56ACB5CA3391D77A27B79B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext