General
- Target file.ps1
- Size 5B
- Sample260704-typjnahy31
- SHA256 479642509c79175b4fd0223bfe01de5b98ef1b63b8dd0fb287bc035802de29b8
- MD5 42887c24bfe6322d88a52c6164585cb3
- SHA1 cdceb1a2df94f55d2a46f1d54d4e8677cc7172f8
- SHA512 dc927ec9082e9a4e535c0827fc3b75f9e4f5edc5d6638fb64fb6cb6537b223ecbac6d6b45203ee60aa118783d0d125ecfbe39e4ecd99d695b1d6ef48e99df621
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
file.ps1
Resource
win10v2004-20260513-en
18 signatures
600 seconds
Behavioral task
behavioral2
Sample
file.ps1
Resource
win11ltsc2024-20260629-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target file.ps1
- Size 5B
- SHA256 479642509c79175b4fd0223bfe01de5b98ef1b63b8dd0fb287bc035802de29b8
- MD5 42887c24bfe6322d88a52c6164585cb3
- SHA1 cdceb1a2df94f55d2a46f1d54d4e8677cc7172f8
- SHA512 dc927ec9082e9a4e535c0827fc3b75f9e4f5edc5d6638fb64fb6cb6537b223ecbac6d6b45203ee60aa118783d0d125ecfbe39e4ecd99d695b1d6ef48e99df621
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in System32 directory