General
- Target start.ps1
- Size 610KB
- Sample260723-c8lgbazdnf
- SHA256 8187d18ad0d703dd77eb24ec1c51492d73e7b9886f7f43639c3770b014b2b98a
- MD5 1215924a9e9acc2a4e4facf734032e74
- SHA1 b7722073659b219c124836e442592144ef7dbd46
- SHA512 f64762bb4c3965978afed3b9d2155a4f32d84a73b3c1cc199e5d30d857207c81800cae256e97def5dacdf7bef6242c33da176e6e2e67007db6d3a8552b7f3361
- SSDEEP 12288:xSwXIBvyw0kWGzliN9y8wSr+2vWVxqJU9YhOqPPnGZ:QwXovM9yx2vagq
- TLSH T1E8D47D307E022EFF5BA820C248C9C11D563C3675DA682DF56ACB4CA2391D77627B79B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.ps1
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 610KB
- SHA256 8187d18ad0d703dd77eb24ec1c51492d73e7b9886f7f43639c3770b014b2b98a
- MD5 1215924a9e9acc2a4e4facf734032e74
- SHA1 b7722073659b219c124836e442592144ef7dbd46
- SHA512 f64762bb4c3965978afed3b9d2155a4f32d84a73b3c1cc199e5d30d857207c81800cae256e97def5dacdf7bef6242c33da176e6e2e67007db6d3a8552b7f3361
- SSDEEP 12288:xSwXIBvyw0kWGzliN9y8wSr+2vWVxqJU9YhOqPPnGZ:QwXovM9yx2vagq
- TLSH T1E8D47D307E022EFF5BA820C248C9C11D563C3675DA682DF56ACB4CA2391D77627B79B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext