General
- Target fivebellsinn.com.ps1
- Size 20KB
- Sample260721-p4f29atxe1
- SHA256 150bccbde3ba9db9347f5e41984ac9643f860ab423c62376cdafc031c2e8458e
- MD5 a4d9f5c8023e4207ed562ca6b9acccff
- SHA1 f1c8fe26ba9494b520e601e856ec959d72f9d985
- SHA512 7021323782e8caa3361b217b7bf295e8dec9ba9fc597cd3b6f3b5bb7cbd0ea80e96038f3500285108d39c1bbd9c694edb1d97f17342b916b5a1e229df6033a26
- SSDEEP 384:pWEDael3X+nABCNSNLoLgElRK+C3kE/ET4Q:EWaA3+ABiSNLoLgElRKwE+V
- TLSH T1E592D8273AA254A543833D7889CDD108E7681597000E5FACF8CDD786EF6362593FBAD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
fivebellsinn.com.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
fivebellsinn.com.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://fivebellsinn.com/JnDiqKj0WH88E0fLNTVFKF4oKJ1g0OXOCwnAqKYJNOs
-
exe.dropper
https://futurebuilders4c.com/futurebuilders4c.zip
Targets
-
- Target fivebellsinn.com.ps1
- Size 20KB
- SHA256 150bccbde3ba9db9347f5e41984ac9643f860ab423c62376cdafc031c2e8458e
- MD5 a4d9f5c8023e4207ed562ca6b9acccff
- SHA1 f1c8fe26ba9494b520e601e856ec959d72f9d985
- SHA512 7021323782e8caa3361b217b7bf295e8dec9ba9fc597cd3b6f3b5bb7cbd0ea80e96038f3500285108d39c1bbd9c694edb1d97f17342b916b5a1e229df6033a26
- SSDEEP 384:pWEDael3X+nABCNSNLoLgElRK+C3kE/ET4Q:EWaA3+ABiSNLoLgElRKwE+V
- TLSH T1E592D8273AA254A543833D7889CDD108E7681597000E5FACF8CDD786EF6362593FBAD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.