General
- Target stage.ps1
- Size 128B
- Sample260624-wvtejset7n
- SHA256 e6d3a52f44ffda39c2bcdba871f256fccd1605d9a2aeb8ae41ed1f88d3fa783e
- MD5 7e5aadefaaa00d62d7f1d71095627c14
- SHA1 47e9997781b3cce7d4a44344c2835c1c5f58ae45
- SHA512 bbcf75a8c889722fc465cb90b075a45d4389ad300c14c35d5da1e992dd02d7e539fa0ab97087a654bb182dadf1c4d1897a8356214a042f54c5d584fed59dd4d3
- TLSH T1BDB02BF709A710CE3349D200504040471463140D40450050A158C2A50884121D047D57
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
stage.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
stage.ps1
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://pdfab.grupovtgs.site/05708de4-1369-4d05-b9b0-fc153e3d3c2d/2104e68f-ed36-4ff5-9dda-00a38d1c7bfe
Targets
-
- Target stage.ps1
- Size 128B
- SHA256 e6d3a52f44ffda39c2bcdba871f256fccd1605d9a2aeb8ae41ed1f88d3fa783e
- MD5 7e5aadefaaa00d62d7f1d71095627c14
- SHA1 47e9997781b3cce7d4a44344c2835c1c5f58ae45
- SHA512 bbcf75a8c889722fc465cb90b075a45d4389ad300c14c35d5da1e992dd02d7e539fa0ab97087a654bb182dadf1c4d1897a8356214a042f54c5d584fed59dd4d3
- TLSH T1BDB02BF709A710CE3349D200504040471463140D40450050A158C2A50884121D047D57
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.