General
- Target d3U5ua0sKbCfyqBo.ps1
- Size 60KB
- Sample260729-rrbm4swdnb
- SHA256 f10f251f0b0805753885de37ba65fe5772a95acbf7d178ea0e2734c4f6063978
- MD5 ff090aa540ff8811aa1e1098f5ef3307
- SHA1 66a59bf7bf9676cd48c2fafdf6efe278050494b9
- SHA512 ef83bede0f3e9bc22113da232978ed69a70e510c23a6606642384f7a48c4e8e1ea678c5faa0b284850578c23b9ae01e2387ac9bc9bc021364b46ad64236e28f5
- SSDEEP 1536:HqxAoYORI4UfwHrXi0n5wHTikEH+jYs5s5tHH1y:HqLYOYwLSXmkEeVObH1y
- TLSH T1C853481625EA1A0869F2AF065ED476B54B5F761E2FBF501802C0CBCE87D2940DF607B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
d3U5ua0sKbCfyqBo.ps1
Resource
win10v2004-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral2
Sample
d3U5ua0sKbCfyqBo.ps1
Resource
win11ltsc2024-20260710-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target d3U5ua0sKbCfyqBo.ps1
- Size 60KB
- SHA256 f10f251f0b0805753885de37ba65fe5772a95acbf7d178ea0e2734c4f6063978
- MD5 ff090aa540ff8811aa1e1098f5ef3307
- SHA1 66a59bf7bf9676cd48c2fafdf6efe278050494b9
- SHA512 ef83bede0f3e9bc22113da232978ed69a70e510c23a6606642384f7a48c4e8e1ea678c5faa0b284850578c23b9ae01e2387ac9bc9bc021364b46ad64236e28f5
- SSDEEP 1536:HqxAoYORI4UfwHrXi0n5wHTikEH+jYs5s5tHH1y:HqLYOYwLSXmkEeVObH1y
- TLSH T1C853481625EA1A0869F2AF065ED476B54B5F761E2FBF501802C0CBCE87D2940DF607B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.