Extracted

• • Target
    xworm.ps1
  • Size 1KB
  • SHA256 4b76eaa4d26f60838d0f26c7c005254dd0193676e05356658cf4898d1e4f2428
  • MD5 9f654166ccfe937d41414cbf157ff818
  • SHA1 4c8095842e8cbe30b353e26df047963b23e2a097
  • SHA512 0821e1675d1b960959cfc8cf6baf083f12f58a459074093978e3db563f3bda441254cf325c47a6051d6735ce555e42c4ef58d87a262e6003061125f051be3ffc
  • TLSH
    T16A314606B1E10B3995C243D20A51F4CC18CBF448C4EAAEE3D5676CA3D15476E62777E9
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  execution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Deletes itself

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1