General
- Target powershell -Command Start-Process p.txt
- Size 657B
- Sample260727-bd2pdagg84
- SHA256 75630229a6c927f6916f6ecb77b5fbbb5690af28ee8419a05e8ff627a2d5a80f
- MD5 022fc37c04914c2d5d8acb472c364ff7
- SHA1 15190c6353dca439cc767e98d32c042f58ee52cd
- SHA512 ec2c6bf662adcada367e14cb5265c391ea9997e24cd2a1244af7d070dccbcbfb0925d07d3e8569595692b42c429a2cc33d19f1d4eaa97d36b4b6a567276ab8f5
- TLSH T1A201DD398E74ECC4879EB79088A13F6708BD281683789440FF341C69BC0ABC5D72A5DC
- MD5 SHA1 SHA512 TLSH
Static task
static1
Malware Config
Targets
-
- Target powershell -Command Start-Process p.txt
- Size 657B
- SHA256 75630229a6c927f6916f6ecb77b5fbbb5690af28ee8419a05e8ff627a2d5a80f
- MD5 022fc37c04914c2d5d8acb472c364ff7
- SHA1 15190c6353dca439cc767e98d32c042f58ee52cd
- SHA512 ec2c6bf662adcada367e14cb5265c391ea9997e24cd2a1244af7d070dccbcbfb0925d07d3e8569595692b42c429a2cc33d19f1d4eaa97d36b4b6a567276ab8f5
- TLSH T1A201DD398E74ECC4879EB79088A13F6708BD281683789440FF341C69BC0ABC5D72A5DC
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.