General
- Target lgtw.ps1.ps1
- Size 111B
- Sample260623-3rb5esg16w
- SHA256 a62799d9f32cc2a25b55e9520d1c1a8d13e8f63ca31de3296f416f7fa0840696
- MD5 c580407ebfaed614978992429699b919
- SHA1 f2a27d3cf969319a837b22b3a28f51a25d1e4912
- SHA512 3cb5bb8f6fe3c94ea80cb41959832aded4065c58930b26eba1315ed73247727c2b70e1829015fb7f750e2351a3a5d03b6772a8278b1fc6a481401d2ffc21c417
- TLSH T1AFB012E7DD005A2CAE7053CB632134FDF0BA505F7470D1744760DD0C47453965619169
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lgtw.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
lgtw.ps1
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target lgtw.ps1.ps1
- Size 111B
- SHA256 a62799d9f32cc2a25b55e9520d1c1a8d13e8f63ca31de3296f416f7fa0840696
- MD5 c580407ebfaed614978992429699b919
- SHA1 f2a27d3cf969319a837b22b3a28f51a25d1e4912
- SHA512 3cb5bb8f6fe3c94ea80cb41959832aded4065c58930b26eba1315ed73247727c2b70e1829015fb7f750e2351a3a5d03b6772a8278b1fc6a481401d2ffc21c417
- TLSH T1AFB012E7DD005A2CAE7053CB632134FDF0BA505F7470D1744760DD0C47453965619169
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.