General
- Target grwrapper.ps1
- Size 1KB
- Sample260720-pkl46acs71
- SHA256 40b6da2210d224a0e13d7ec55f12b6ec265107134d378a547d2f758fc44e1036
- MD5 d5d9bea7a607c4bf693ca668f0ac24b1
- SHA1 767012464b4350f8f18a7c4004de9085821312db
- SHA512 e5724c5a2a74416812e7ded7c6408709bf7199fe36e7cb938f1553e99162baa28e638af6f59407f2923bd7df2c5b96387fb866dc1bb996663f6645adaff5f65b
- TLSH T1F441123BB5A00AB187979726AEE5D4385822109F09CD1C1F756D82E81F627B77D0F784
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
grwrapper.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
grwrapper.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
ps1.dropper
https://f326897f.whatdoumeanfunny.pages.dev/GraphRunner.ps1
-
exe.dropper
https://f326897f.whatdoumeanfunny.pages.dev/GraphRunner.ps1
-
exe.dropper
https://f326897f.whatdoumeanfunny.pages.dev
Targets
-
- Target grwrapper.ps1
- Size 1KB
- SHA256 40b6da2210d224a0e13d7ec55f12b6ec265107134d378a547d2f758fc44e1036
- MD5 d5d9bea7a607c4bf693ca668f0ac24b1
- SHA1 767012464b4350f8f18a7c4004de9085821312db
- SHA512 e5724c5a2a74416812e7ded7c6408709bf7199fe36e7cb938f1553e99162baa28e638af6f59407f2923bd7df2c5b96387fb866dc1bb996663f6645adaff5f65b
- TLSH T1F441123BB5A00AB187979726AEE5D4385822109F09CD1C1F756D82E81F627B77D0F784
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.