General
- Target 03d3f82e6cfedbc9eff6a65d6c903ef10febc88204175b49fdb5a7f015cedc9a.ps1
- Size 1KB
- Sample260802-kcl2zaydrc
- SHA256 03d3f82e6cfedbc9eff6a65d6c903ef10febc88204175b49fdb5a7f015cedc9a
- MD5 5e1b1e64edd3809e1937b9e4d845de7b
- SHA1 3b4a79c3e0da0cc88ddbd8830a952b2d37d37789
- SHA512 e1d2ba90f4da596af890b53e9808d3de7e5cc2798d6cf724c3bd440610947afb706f71f9fff96eac29a4f0e43986077e2ab3e6548253b81ad11d5d22940a7901
- TLSH T138312C532B826A4083574069DFA199488A45F13B1DCDEC29FABC11915FE3030A3BCB8D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
03d3f82e6cfedbc9eff6a65d6c903ef10febc88204175b49fdb5a7f015cedc9a.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
03d3f82e6cfedbc9eff6a65d6c903ef10febc88204175b49fdb5a7f015cedc9a.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
https://akxstudio.es/slidefork/merrysalt
-
exe.dropper
https://akxstudio.es/slidefork/merrysalt
Targets
-
- Target 03d3f82e6cfedbc9eff6a65d6c903ef10febc88204175b49fdb5a7f015cedc9a.ps1
- Size 1KB
- SHA256 03d3f82e6cfedbc9eff6a65d6c903ef10febc88204175b49fdb5a7f015cedc9a
- MD5 5e1b1e64edd3809e1937b9e4d845de7b
- SHA1 3b4a79c3e0da0cc88ddbd8830a952b2d37d37789
- SHA512 e1d2ba90f4da596af890b53e9808d3de7e5cc2798d6cf724c3bd440610947afb706f71f9fff96eac29a4f0e43986077e2ab3e6548253b81ad11d5d22940a7901
- TLSH T138312C532B826A4083574069DFA199488A45F13B1DCDEC29FABC11915FE3030A3BCB8D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.