General
- Target run.ps1
- Size 769B
- Sample260707-smlsysf12w
- SHA256 5fdacb9486fdff75d5b5039e4f2401ace4bf4cfc4e310ce41141acaa71157c72
- MD5 e5f51c7eb6e80233600660a663981e13
- SHA1 9ac116ffa1ce9d49efa117ca26e0345d2300b13e
- SHA512 b366b7ce0d08aa876be7b1ffeb376dee3485089c99496947089ec0d8c5dffcdfabc325a6374232e0c2ed452229a5dc0c45f29e34feda3d352a8bea50ddbfa71a
- TLSH T11901650F4200C2BC86C163E1920355A4E84F968E339C34E0779B9CF8B25DCDF815D3A1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
run.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
run.ps1
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
ps1.dropper
https://signindat.com/payload.bin
Targets
-
- Target run.ps1
- Size 769B
- SHA256 5fdacb9486fdff75d5b5039e4f2401ace4bf4cfc4e310ce41141acaa71157c72
- MD5 e5f51c7eb6e80233600660a663981e13
- SHA1 9ac116ffa1ce9d49efa117ca26e0345d2300b13e
- SHA512 b366b7ce0d08aa876be7b1ffeb376dee3485089c99496947089ec0d8c5dffcdfabc325a6374232e0c2ed452229a5dc0c45f29e34feda3d352a8bea50ddbfa71a
- TLSH T11901650F4200C2BC86C163E1920355A4E84F968E339C34E0779B9CF8B25DCDF815D3A1
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.