General
- Target start.ps1
- Size 652KB
- Sample260728-sjm7lsyeph
- SHA256 5e03a51c89447cb8b156fd7acb60723c54c4d9fd9c3fb94ec60c329059362f95
- MD5 3b077bf6ba52a810f395c2db57d58bd9
- SHA1 02792cec687efb816d10afde9790f24a18de4db1
- SHA512 18ba35435f9507394ee485353087f449e799e7ce94274f748499f54b6d5e9bbd6a8ec7f33ef075d35babeafeb0fd999ab9a45e6b7825f838c948df67bf954fa3
- SSDEEP 12288:2UUgpYq16YKL/vG4lkcFMbrTvH5QZuP3x5vP+cMF:dUWYqslNNMbrTv6WtMF
- TLSH T162E46E307A422EFF5BBC20C244C6C51D563822B5CA682DF66ACB4CA3394D77617B79B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.ps1
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 652KB
- SHA256 5e03a51c89447cb8b156fd7acb60723c54c4d9fd9c3fb94ec60c329059362f95
- MD5 3b077bf6ba52a810f395c2db57d58bd9
- SHA1 02792cec687efb816d10afde9790f24a18de4db1
- SHA512 18ba35435f9507394ee485353087f449e799e7ce94274f748499f54b6d5e9bbd6a8ec7f33ef075d35babeafeb0fd999ab9a45e6b7825f838c948df67bf954fa3
- SSDEEP 12288:2UUgpYq16YKL/vG4lkcFMbrTvH5QZuP3x5vP+cMF:dUWYqslNNMbrTv6WtMF
- TLSH T162E46E307A422EFF5BBC20C244C6C51D563822B5CA682DF66ACB4CA3394D77617B79B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext