General
- Target file2.t
- Size 2KB
- Sample260706-ak232scv5k
- SHA256 27c6ce5b3dc4ebda91a54c067542bca3e030572f440dda9a0f28141fa43581e5
- MD5 cc99429210a9c686f52b103cfb8af63e
- SHA1 99446dcca7789466165b64924618cb59690c755a
- SHA512 35176557b3560ade8951d8d6fb222db8f6ce8b5f4f7c35ce35dc6a4bb5ffd3bc1317c4e19f897a6c73b9511c2f5ab7a7e1c9a1363537ad4f0c103fd15e945885
- TLSH T11241312B8AA011D4E161531CA5F4F76EFE2B909E67761104F84DD18E26D3C28532BBF9
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
file2.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
file2.ps1
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file2.t
- Size 2KB
- SHA256 27c6ce5b3dc4ebda91a54c067542bca3e030572f440dda9a0f28141fa43581e5
- MD5 cc99429210a9c686f52b103cfb8af63e
- SHA1 99446dcca7789466165b64924618cb59690c755a
- SHA512 35176557b3560ade8951d8d6fb222db8f6ce8b5f4f7c35ce35dc6a4bb5ffd3bc1317c4e19f897a6c73b9511c2f5ab7a7e1c9a1363537ad4f0c103fd15e945885
- TLSH T11241312B8AA011D4E161531CA5F4F76EFE2B909E67761104F84DD18E26D3C28532BBF9
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.