General
- Target start.ps1
- Size 587KB
- Sample260723-w4r8vavdkd
- SHA256 2ce1b028340ba28f3f4074ef3bf5dbeae51f4dccb0f140dd89120c5ce1e8f937
- MD5 6a1753028024d8991008815505625722
- SHA1 9e1e95d393a9f37a4d462a3a5e3de961692a22cd
- SHA512 b8a1fa86d8abe62bc6285ab2283fb333ad39bc950b4db76a4151769f7b25dd615606645415fb947a31fe8dfe396fde7fff4943f880ff64149af560c202e216d2
- SSDEEP 12288:KsbGEqtAXRB92kt/nh+GTKFFKYfkZskYSS+A/:KsbGEqtAXRB9Nt/nhhTKeYge
- TLSH T12AD45D347A022EFF4BB820C248C9C11D563836B9D9696CF569CB0CA3391D77A27779B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.ps1
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 587KB
- SHA256 2ce1b028340ba28f3f4074ef3bf5dbeae51f4dccb0f140dd89120c5ce1e8f937
- MD5 6a1753028024d8991008815505625722
- SHA1 9e1e95d393a9f37a4d462a3a5e3de961692a22cd
- SHA512 b8a1fa86d8abe62bc6285ab2283fb333ad39bc950b4db76a4151769f7b25dd615606645415fb947a31fe8dfe396fde7fff4943f880ff64149af560c202e216d2
- SSDEEP 12288:KsbGEqtAXRB92kt/nh+GTKFFKYfkZskYSS+A/:KsbGEqtAXRB9Nt/nhhTKeYge
- TLSH T12AD45D347A022EFF4BB820C248C9C11D563836B9D9696CF569CB0CA3391D77A27779B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext