General
- Target 3fcc8667d73fc631206bd32191db3d5ab96667a1fe6e9d67e15892e0f3a9f122.ps1
- Size 416KB
- Sample260707-a4qt5aex3s
- SHA256 3fcc8667d73fc631206bd32191db3d5ab96667a1fe6e9d67e15892e0f3a9f122
- MD5 85a253c748b836b083d3ad2c33c0d6f8
- SHA1 f9474d9412768f26e1bce9c6f5b705abacba1039
- SHA512 fc1b8251a49a95eaa52f4b2fafbc1dfdcb5f02eabe90506b95b5346bc2095bf5f4f66586dc971477d034148267a27a1c298044c5ebfa6f4a4e76f782a8b529ae
- SSDEEP 12288:ooPOoeIhiBBRBAWgKEmKTJSQJYxYV0YnmEq4k5Z:jW3lPIKZkJ4xYd5q5
- TLSH T13194235003F4AF004198FD3CA4DF27789FA1C4EA580A2F49F68E5A9277DB151CE3A659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
3fcc8667d73fc631206bd32191db3d5ab96667a1fe6e9d67e15892e0f3a9f122.ps1
Resource
win10v2004-20260513-en
5 signatures
40 seconds
Behavioral task
behavioral2
Sample
3fcc8667d73fc631206bd32191db3d5ab96667a1fe6e9d67e15892e0f3a9f122.ps1
Resource
win11ltsc2024-20260706-en
5 signatures
40 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://nodejs.org/dist/v24.13.0/node-v24.13.0-win-x64.zip
Targets
-
- Target 3fcc8667d73fc631206bd32191db3d5ab96667a1fe6e9d67e15892e0f3a9f122.ps1
- Size 416KB
- SHA256 3fcc8667d73fc631206bd32191db3d5ab96667a1fe6e9d67e15892e0f3a9f122
- MD5 85a253c748b836b083d3ad2c33c0d6f8
- SHA1 f9474d9412768f26e1bce9c6f5b705abacba1039
- SHA512 fc1b8251a49a95eaa52f4b2fafbc1dfdcb5f02eabe90506b95b5346bc2095bf5f4f66586dc971477d034148267a27a1c298044c5ebfa6f4a4e76f782a8b529ae
- SSDEEP 12288:ooPOoeIhiBBRBAWgKEmKTJSQJYxYV0YnmEq4k5Z:jW3lPIKZkJ4xYd5q5
- TLSH T13194235003F4AF004198FD3CA4DF27789FA1C4EA580A2F49F68E5A9277DB151CE3A659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.