General
- Target 296wcrypted.ps1
- Size 5.6MB
- Sample260729-rht34awblf
- SHA256 fdce332306e36e4715ca2a517e04f75eb4ce608294a1243264b332db0ffd21fc
- MD5 d84737c3a979c8f63f55f2d92f2a41de
- SHA1 f13a7bc980ab50eb8a37716a6c5a3c4c2bf9674f
- SHA512 c07f323fbe07af7a36ff61e8f9f1e40e451fe9aceca8402511ce05490b67a56cfa6f5c1edd303d9ede636817a35da878d08d1d1af5e4fc3c3b0f079a8a04880c
- SSDEEP 24576:il6tqgB3W4vxB6mq3vKiJ9ujEoCdrHtO/f0ZW8q1qP2AmY9A/nVTpl817gA8yCaP:8
- TLSH T1AC466468ECDC1C96569DBE5CE872F09216C6C86A1D818C8B242F15EF0B7D2F8BC6D075
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
296wcrypted.ps1
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
296wcrypted.ps1
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 296wcrypted.ps1
- Size 5.6MB
- SHA256 fdce332306e36e4715ca2a517e04f75eb4ce608294a1243264b332db0ffd21fc
- MD5 d84737c3a979c8f63f55f2d92f2a41de
- SHA1 f13a7bc980ab50eb8a37716a6c5a3c4c2bf9674f
- SHA512 c07f323fbe07af7a36ff61e8f9f1e40e451fe9aceca8402511ce05490b67a56cfa6f5c1edd303d9ede636817a35da878d08d1d1af5e4fc3c3b0f079a8a04880c
- SSDEEP 24576:il6tqgB3W4vxB6mq3vKiJ9ujEoCdrHtO/f0ZW8q1qP2AmY9A/nVTpl817gA8yCaP:8
- TLSH T1AC466468ECDC1C96569DBE5CE872F09216C6C86A1D818C8B242F15EF0B7D2F8BC6D075
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext