General
- Target test.ps2.ps1
- Size 98B
- Sample260727-dlmxasha79
- SHA256 b5be098b2e49ceffaf644f612c7c7359e9e692fefcc5f411daa2158e47965333
- MD5 c4cb677c47e477cd9c59c4a0841db5a7
- SHA1 b1090973dabf578f8808e4ed2bd66e5345c903e8
- SHA512 0c741440010ce69ab42340472b1eaf3f843a70404c7136b7fdbfa2096094408669a2b9a665ebb5ec0bc9d643e8a9decccd2d536b5bd0fdacfd6613850ace2d59
- TLSH T1DFB01295DC5403E54A85105583676A50C5B3B0800992A9F47F4123CF1E72E30D90D45C
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
test.ps2.ps1
Resource
win11-20260513-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target test.ps2.ps1
- Size 98B
- SHA256 b5be098b2e49ceffaf644f612c7c7359e9e692fefcc5f411daa2158e47965333
- MD5 c4cb677c47e477cd9c59c4a0841db5a7
- SHA1 b1090973dabf578f8808e4ed2bd66e5345c903e8
- SHA512 0c741440010ce69ab42340472b1eaf3f843a70404c7136b7fdbfa2096094408669a2b9a665ebb5ec0bc9d643e8a9decccd2d536b5bd0fdacfd6613850ace2d59
- TLSH T1DFB01295DC5403E54A85105583676A50C5B3B0800992A9F47F4123CF1E72E30D90D45C
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in Drivers directory
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.