General
- Target New Text Document.txt
- Size 38B
- Sample260802-nzpyxshe62
- SHA256 0285798aae6fabc984f9f0ccc0051923279a56527f02d454b87a521b2dfe3a8c
- MD5 e1fa0deabce49e34d232234b129c9e54
- SHA1 e633ae95c9fc91a3b2ab355e459b8a3f6d7bce52
- SHA512 83bce77d332e7d6311bf596303759f05e1832f67ada33319104875d1c0202968ad23430051b9936461407a939d1d5b15c1345a6cd2f17683735b1669ec345017
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
New Text Document.txt
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Text Document.txt
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://besteading.com/9jameqpgXoOgALhG
Targets
-
- Target New Text Document.txt
- Size 38B
- SHA256 0285798aae6fabc984f9f0ccc0051923279a56527f02d454b87a521b2dfe3a8c
- MD5 e1fa0deabce49e34d232234b129c9e54
- SHA1 e633ae95c9fc91a3b2ab355e459b8a3f6d7bce52
- SHA512 83bce77d332e7d6311bf596303759f05e1832f67ada33319104875d1c0202968ad23430051b9936461407a939d1d5b15c1345a6cd2f17683735b1669ec345017
- MD5 SHA1 SHA512
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.