General
- Target 226b78eb2ba756120adf78e49a299fde116f524fa9bf43b81059e2b32672fdac.ps1
- Size 1KB
- Sample260730-s8ypmsbh43
- SHA256 226b78eb2ba756120adf78e49a299fde116f524fa9bf43b81059e2b32672fdac
- MD5 aeee8f67fec136379cd5ccffc4939ff8
- SHA1 de5cd30cb21f5eb45207cec9976b652a14cb514f
- SHA512 32520b408b4cab49e0972f214118546bbfb69c955506845c21a7d25995300927da6e38eb598f7ec4f9c76aa4295d1aa81c547ed6486af229dd93c2ec2820d875
- TLSH T16A3102287203DB5A947255354ECAE0ACF922117749FE2D00FA5895938FFB245C169E4D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
226b78eb2ba756120adf78e49a299fde116f524fa9bf43b81059e2b32672fdac.ps1
Resource
win10v2004-20260513-en
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
226b78eb2ba756120adf78e49a299fde116f524fa9bf43b81059e2b32672fdac.ps1
Resource
win11ltsc2024-20260710-en
6 signatures
120 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
http://158.94.211.92/s_enterprise
Targets
-
- Target 226b78eb2ba756120adf78e49a299fde116f524fa9bf43b81059e2b32672fdac.ps1
- Size 1KB
- SHA256 226b78eb2ba756120adf78e49a299fde116f524fa9bf43b81059e2b32672fdac
- MD5 aeee8f67fec136379cd5ccffc4939ff8
- SHA1 de5cd30cb21f5eb45207cec9976b652a14cb514f
- SHA512 32520b408b4cab49e0972f214118546bbfb69c955506845c21a7d25995300927da6e38eb598f7ec4f9c76aa4295d1aa81c547ed6486af229dd93c2ec2820d875
- TLSH T16A3102287203DB5A947255354ECAE0ACF922117749FE2D00FA5895938FFB245C169E4D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file