General
- Target ps_edited.ps1
- Size 476B
- Sample260623-qtraxads2m
- SHA256 355d72c66ca96ba88ef3e1d2f434e1386657b88570c182c06bee910a4417a7ef
- MD5 c0b940e0866bd1ac13de0bc58aa7e424
- SHA1 c84e606ad753516aef6ac947aa1759725dffe3c0
- SHA512 1b6537e384f22b221c067bbe3a6475096a959fc4d3980a1543b89a3a391965892480cea459de1d8cc2bbf4ddc7a660d55a1117efdbad48441ac6a84e37ade6fb
- TLSH T156F00ECC4BBB78CFB39231D52CEAA88CDA480188034A19F0E4CA8CA0664626C143CCB1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ps_edited.ps1
Resource
win10v2004-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral2
Sample
ps_edited.ps1
Resource
win11ltsc2024-20260617-en
4 signatures
30 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
http://46.151.182.157:1337/api/ps
Targets
-
- Target ps_edited.ps1
- Size 476B
- SHA256 355d72c66ca96ba88ef3e1d2f434e1386657b88570c182c06bee910a4417a7ef
- MD5 c0b940e0866bd1ac13de0bc58aa7e424
- SHA1 c84e606ad753516aef6ac947aa1759725dffe3c0
- SHA512 1b6537e384f22b221c067bbe3a6475096a959fc4d3980a1543b89a3a391965892480cea459de1d8cc2bbf4ddc7a660d55a1117efdbad48441ac6a84e37ade6fb
- TLSH T156F00ECC4BBB78CFB39231D52CEAA88CDA480188034A19F0E4CA8CA0664626C143CCB1
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.