General
- Target 39e9b2_e03e8873e8e84b2da6b33f42f81c24ef.txt.ps1
- Size 22.1MB
- Sample260720-vd9jrsav3t
- SHA256 9e003ce94bd6593f96d075cd4fb6d504077c3724d086b997a7ddb8535e77ce11
- MD5 d419970917ecd27f460c38d1e8c889c6
- SHA1 1171ed948f058d305d44ab7c23ae23fde7010a86
- SHA512 7601078164f93fea239c624b75b0e2ee0804950715b939bf79a5d03882aad11e5be068f6602c94230ab0a675e598518613a95767d2c8102f7ee50e1412dc2525
- SSDEEP 3072:VVgjrIoNankvyYUoCQlPpXHxUF+Hph2Jn90jp4GqTunKuttM21ZiAWkhVLwG+XVt:9
- TLSH T17537FF7DCEE8423EC277C929D9CA4A17F85A092B230CFD4A68D7739755271837CA211E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
39e9b2_e03e8873e8e84b2da6b33f42f81c24ef.txt.ps1
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
39e9b2_e03e8873e8e84b2da6b33f42f81c24ef.txt.ps1
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 39e9b2_e03e8873e8e84b2da6b33f42f81c24ef.txt.ps1
- Size 22.1MB
- SHA256 9e003ce94bd6593f96d075cd4fb6d504077c3724d086b997a7ddb8535e77ce11
- MD5 d419970917ecd27f460c38d1e8c889c6
- SHA1 1171ed948f058d305d44ab7c23ae23fde7010a86
- SHA512 7601078164f93fea239c624b75b0e2ee0804950715b939bf79a5d03882aad11e5be068f6602c94230ab0a675e598518613a95767d2c8102f7ee50e1412dc2525
- SSDEEP 3072:VVgjrIoNankvyYUoCQlPpXHxUF+Hph2Jn90jp4GqTunKuttM21ZiAWkhVLwG+XVt:9
- TLSH T17537FF7DCEE8423EC277C929D9CA4A17F85A092B230CFD4A68D7739755271837CA211E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext