General
- Target lol.ps1
- Size 3KB
- Sample260803-kcpg4a1hrg
- SHA256 baa7e0303a5e348198e6c509a97bbd5555b7442352174cbe27f624a322d053c9
- MD5 544dd2a07b84386e4cbee4071ba9f9cf
- SHA1 2de5d3199a1107bc208d71493b58cccb1295eb9a
- SHA512 853e2ac7eac110ef88ce8012aba12a686df1f71582d74cd2933fe308127556d12055fa4fd87765aa5f865c292e7f75658f12ff90d09bbcaacddc0aede7e5131a
- TLSH T10B8185322606B7241AB21FE6E857EC94F51A512301BA2D05FAFDC18DEF3E4A483B175D
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lol.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
lol.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target lol.ps1
- Size 3KB
- SHA256 baa7e0303a5e348198e6c509a97bbd5555b7442352174cbe27f624a322d053c9
- MD5 544dd2a07b84386e4cbee4071ba9f9cf
- SHA1 2de5d3199a1107bc208d71493b58cccb1295eb9a
- SHA512 853e2ac7eac110ef88ce8012aba12a686df1f71582d74cd2933fe308127556d12055fa4fd87765aa5f865c292e7f75658f12ff90d09bbcaacddc0aede7e5131a
- TLSH T10B8185322606B7241AB21FE6E857EC94F51A512301BA2D05FAFDC18DEF3E4A483B175D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.