General
- Target d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8.ps1
- Size 1KB
- Sample260802-kcl2zaydre
- SHA256 d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8
- MD5 bd2ba9d488cb784aae3765952e6c5f6f
- SHA1 5c2cc43040bb2446338f35324c3830010be2ed0f
- SHA512 32fe6e10b73f1be347a48c9cb7aebd866bc6d7fb1c0477786e7b08ee5cf3a3c84568a6daafb8e54487860e0bca33814415fdbddb4e0effe26d2d744a62a5e195
- TLSH T13A31DC566B00A90A427B6129DF718848DF0561334CC86968FA7D01601FF142063BCF6E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
http://akxstudio.es/speakexclude/catalogbrief
-
exe.dropper
http://akxstudio.es/speakexclude/catalogbrief
Targets
-
- Target d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8.ps1
- Size 1KB
- SHA256 d498ab02aab6595c465d272a05f73cd3b6406f592a9f309286f9427b82b9c1e8
- MD5 bd2ba9d488cb784aae3765952e6c5f6f
- SHA1 5c2cc43040bb2446338f35324c3830010be2ed0f
- SHA512 32fe6e10b73f1be347a48c9cb7aebd866bc6d7fb1c0477786e7b08ee5cf3a3c84568a6daafb8e54487860e0bca33814415fdbddb4e0effe26d2d744a62a5e195
- TLSH T13A31DC566B00A90A427B6129DF718848DF0561334CC86968FA7D01601FF142063BCF6E
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.