General
- Target whoami.ps1
- Size 136B
- Sample260724-wye2bsal2y
- SHA256 f743fc7f585acdb45f7d58d6ff4020365b296c8f7dcdf3086eb3e0b9db845929
- MD5 ba2b71609a7d98a871445be4f08fb534
- SHA1 c8916e673a7b5e39f54b09fdddd240a4260c74be
- SHA512 ad39e69b2158387328aca1a1646b8ee33a2bd6178f56841c39681e97414f4e3f768b236c9647c29baea20f5b9efb31dd99253f3794bbb4cbb4e38aec217360db
- TLSH T17CC08C6310E2A790942025A0E404678AA282A89608492CF60888829639353B64005441
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
whoami.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target whoami.ps1
- Size 136B
- SHA256 f743fc7f585acdb45f7d58d6ff4020365b296c8f7dcdf3086eb3e0b9db845929
- MD5 ba2b71609a7d98a871445be4f08fb534
- SHA1 c8916e673a7b5e39f54b09fdddd240a4260c74be
- SHA512 ad39e69b2158387328aca1a1646b8ee33a2bd6178f56841c39681e97414f4e3f768b236c9647c29baea20f5b9efb31dd99253f3794bbb4cbb4e38aec217360db
- TLSH T17CC08C6310E2A790942025A0E404678AA282A89608492CF60888829639353B64005441
- MD5 SHA1 SHA512 TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.