General
- Target trigger.ps1
- Size 206B
- Sample260605-eghbpabz5r
- SHA256 f8c4e4aa65325e7e41a41093df8041f272fcec680e0ed77c3a1a3d9fa7421eac
- MD5 866ff29736fa366985a059602c8f3f62
- SHA1 1e34b5739ddcc9437263cc5cbbdd47394da19ad9
- SHA512 54eae14c4700697b96f1d2cac65a57f20fb035978c4e3b5ade85dc0137a8371c08fdb78131da7ea1bc7065b57ceb8cf6af8e6cb4640cf263b0925974e37a5c1d
- TLSH T118D023F3C78147D03D40C3D30423925BF2053B359C553C390DEB328500423B0740142A
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
trigger.ps1
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
trigger.ps1
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target trigger.ps1
- Size 206B
- SHA256 f8c4e4aa65325e7e41a41093df8041f272fcec680e0ed77c3a1a3d9fa7421eac
- MD5 866ff29736fa366985a059602c8f3f62
- SHA1 1e34b5739ddcc9437263cc5cbbdd47394da19ad9
- SHA512 54eae14c4700697b96f1d2cac65a57f20fb035978c4e3b5ade85dc0137a8371c08fdb78131da7ea1bc7065b57ceb8cf6af8e6cb4640cf263b0925974e37a5c1d
- TLSH T118D023F3C78147D03D40C3D30423925BF2053B359C553C390DEB328500423B0740142A
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.