General
- Target install-gateway-windows 4.ps1
- Size 14KB
- Sample260708-lybzkae17j
- SHA256 b59f693279700c90d936539f7acbcf6029c3344aaae7091663d08200f12b40cb
- MD5 e67efdcf59d572aee0c773cf7de35ad2
- SHA1 aed9ef57745d7a861c46d05f260e6b6c10d7adcc
- SHA512 7c35e3146c4354967d144b09043ea1c36fb62646d24d382aa1b978a28d2dc18e6e48cf0f52e6d8c2cd23965f7ee9b83547e853d068b58bb4664c6b40456d382d
- SSDEEP 384:lMlBGabbgODax7Lc+WiXQP/s3GvrUeFYY:lOQsgOuOfzP/sWgeZ
- TLSH T18F6217095E5012A6A6D7E63F44CF9102F36C117B95091B08BCAC86807FD937CCE7E9AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
install-gateway-windows 4.ps1
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
install-gateway-windows 4.ps1
Resource
win11ltsc2024-20260706-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target install-gateway-windows 4.ps1
- Size 14KB
- SHA256 b59f693279700c90d936539f7acbcf6029c3344aaae7091663d08200f12b40cb
- MD5 e67efdcf59d572aee0c773cf7de35ad2
- SHA1 aed9ef57745d7a861c46d05f260e6b6c10d7adcc
- SHA512 7c35e3146c4354967d144b09043ea1c36fb62646d24d382aa1b978a28d2dc18e6e48cf0f52e6d8c2cd23965f7ee9b83547e853d068b58bb4664c6b40456d382d
- SSDEEP 384:lMlBGabbgODax7Lc+WiXQP/s3GvrUeFYY:lOQsgOuOfzP/sWgeZ
- TLSH T18F6217095E5012A6A6D7E63F44CF9102F36C117B95091B08BCAC86807FD937CCE7E9AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.