Extracted

• • Target
    xworm.ps1
  • Size 1KB
  • SHA256 4730f3a9af94159c9e56982aae9c3e3fe4028c7abdb3d8a3eedc75568b482b4a
  • MD5 66c62b46603e4600c4d38e2f72f0ea8d
  • SHA1 44bcf0ed3caa46ac2dbbbf5d3886972c25fd159a
  • SHA512 8d807781e11922ff37e829e47405ca8d05acd2c7736c2805ea1ee87e6081c60e0ee6d5e770138e3746f55e3c5d4c7b0c93caf80c298316eaadc4ffe5dd25f56c
  • TLSH
    T1BE118243F1A2053F81E602E29BA2798E288BD84AC4145FE2D10B9C6396D473E59B77D7
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  execution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Deletes itself

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2