General
- Target Build_Europe__66.ps1
- Size 222KB
- Sample260709-ws5d2aft9l
- SHA256 7324e58b1ad0cc4fe55d0b3d5a05ea9f470e599709f9566d712419c18ffb309b
- MD5 4c600fec0aca0cb0de13aa68439bfb15
- SHA1 e6aa518698e7e66db4fb05742b13dfa2680a85f2
- SHA512 ac38dd1bea471b61a519240f9b5affc4543bdf735323a5230219168a97666b0178a42b5596829a8416621e1e4c04baae7546f2581b19e9cf98ddfd05f32f13d9
- SSDEEP 6144:u99CakLOi5AXGPV+wmyT7C1Y/SVv88p+xHuUEUxgVIstVkQ6l6CuCIXtMoM:oiPTHeBNHbCH
- TLSH T1B62411D32345EAB8E2CE0BB6AC0B0515E1F9C816F99E5188B7B27DD7779BD401834E81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Build_Europe__66.ps1
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
Build_Europe__66.ps1
Resource
win10ltsc2021-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral3
Sample
Build_Europe__66.ps1
Resource
win11-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral4
Sample
Build_Europe__66.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target Build_Europe__66.ps1
- Size 222KB
- SHA256 7324e58b1ad0cc4fe55d0b3d5a05ea9f470e599709f9566d712419c18ffb309b
- MD5 4c600fec0aca0cb0de13aa68439bfb15
- SHA1 e6aa518698e7e66db4fb05742b13dfa2680a85f2
- SHA512 ac38dd1bea471b61a519240f9b5affc4543bdf735323a5230219168a97666b0178a42b5596829a8416621e1e4c04baae7546f2581b19e9cf98ddfd05f32f13d9
- SSDEEP 6144:u99CakLOi5AXGPV+wmyT7C1Y/SVv88p+xHuUEUxgVIstVkQ6l6CuCIXtMoM:oiPTHeBNHbCH
- TLSH T1B62411D32345EAB8E2CE0BB6AC0B0515E1F9C816F99E5188B7B27DD7779BD401834E81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.