General
- Target ps_edited.ps1
- Size 478B
- Sample260623-qtbv8ads2l
- SHA256 ef236a6be4702b5c191bc7bae0a14a567b5f52397d56fe3dbdff0789255c71bb
- MD5 1dee2c2fe4c441ef524e7fc2db27afe7
- SHA1 fec4b0808361409ecc8a9c48900be78a3e767d1b
- SHA512 5537f6516685f28408a6a3222cfbb57fff9dae1c4599875ba06044f459f080d911899b05ab65f4ca611fb056d9579fde65b05f092320eb1dda756d2b6953a6b0
- TLSH T104F09ECC4FAB79DFB39631D52DE6A88CDA480189035A19F4E4CA9CA1764566C147CCB1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ps_edited.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ps_edited.ps1
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
http://46.151.182.157:1337/api/ps
Targets
-
- Target ps_edited.ps1
- Size 478B
- SHA256 ef236a6be4702b5c191bc7bae0a14a567b5f52397d56fe3dbdff0789255c71bb
- MD5 1dee2c2fe4c441ef524e7fc2db27afe7
- SHA1 fec4b0808361409ecc8a9c48900be78a3e767d1b
- SHA512 5537f6516685f28408a6a3222cfbb57fff9dae1c4599875ba06044f459f080d911899b05ab65f4ca611fb056d9579fde65b05f092320eb1dda756d2b6953a6b0
- TLSH T104F09ECC4FAB79DFB39631D52DE6A88CDA480189035A19F4E4CA9CA1764566C147CCB1
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.