General
- Target f85f1b29c0c05b4bdf7458e9870829b8af05113667c65541e1b867193a3d26c5.ps1
- Size 201KB
- Sample260605-jh96bact2x
- SHA256 f85f1b29c0c05b4bdf7458e9870829b8af05113667c65541e1b867193a3d26c5
- MD5 cbb61a9b42b09a998d76e4f724656b16
- SHA1 d01b5b33e13d54d7ac257d00baeadf4fa1a83b56
- SHA512 b2782cf7247976fc774402ca4bd236b7e536ef725825bb3f813523855cb119bf77578f213bb3681c2b223601fb8854025c51f16ce60494ac540601dd5a102317
- SSDEEP 6144:a6gPBqQkZxAmd4enFmv1UxqllCjhJg8W5SafS:ePbkZDn8v1KqlEJg8aS
- TLSH T15114E5A94E5B38C8986528D2C65270826FA5073F6D3DC8437B613E41622F71ADBCDB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
f85f1b29c0c05b4bdf7458e9870829b8af05113667c65541e1b867193a3d26c5.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f85f1b29c0c05b4bdf7458e9870829b8af05113667c65541e1b867193a3d26c5.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://quantifyr.site/cl3.zip
Targets
-
- Target f85f1b29c0c05b4bdf7458e9870829b8af05113667c65541e1b867193a3d26c5.ps1
- Size 201KB
- SHA256 f85f1b29c0c05b4bdf7458e9870829b8af05113667c65541e1b867193a3d26c5
- MD5 cbb61a9b42b09a998d76e4f724656b16
- SHA1 d01b5b33e13d54d7ac257d00baeadf4fa1a83b56
- SHA512 b2782cf7247976fc774402ca4bd236b7e536ef725825bb3f813523855cb119bf77578f213bb3681c2b223601fb8854025c51f16ce60494ac540601dd5a102317
- SSDEEP 6144:a6gPBqQkZxAmd4enFmv1UxqllCjhJg8W5SafS:ePbkZDn8v1KqlEJg8aS
- TLSH T15114E5A94E5B38C8986528D2C65270826FA5073F6D3DC8437B613E41622F71ADBCDB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.