General
- Target lol.ps1
- Size 4KB
- Sample260803-ktwmqseq9t
- SHA256 df6f01823a7122a6bdaff82b6a13e095e4ef0dedb438332bad8fd13d32640403
- MD5 f18053079479759203992a5faea9cbed
- SHA1 54c8fabeb73c4d757a1c7ebf16b8317e9af71f2f
- SHA512 8a5fb7a048001644a6e4f6b3c57d5e03be1e1b538de9e889e6fcb5721275ff27fd0a20f0a442e7234803c28b385d3115d73dc251157f73301ce5266e7a221118
- SSDEEP 96:OzEeSuvyZXeiph8qghs+SFQxa6Z1MQTOvsKIcvymY:OjSuvyZXeiph8qgFkQxJZ1MQ0sKNv8
- TLSH T1B491B721260276181AF24FE2EC57E8D4F91B512741BD3C11F9FDC09D9F3E49492B126D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lol.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
lol.ps1
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target lol.ps1
- Size 4KB
- SHA256 df6f01823a7122a6bdaff82b6a13e095e4ef0dedb438332bad8fd13d32640403
- MD5 f18053079479759203992a5faea9cbed
- SHA1 54c8fabeb73c4d757a1c7ebf16b8317e9af71f2f
- SHA512 8a5fb7a048001644a6e4f6b3c57d5e03be1e1b538de9e889e6fcb5721275ff27fd0a20f0a442e7234803c28b385d3115d73dc251157f73301ce5266e7a221118
- SSDEEP 96:OzEeSuvyZXeiph8qghs+SFQxa6Z1MQTOvsKIcvymY:OjSuvyZXeiph8qgFkQxJZ1MQ0sKNv8
- TLSH T1B491B721260276181AF24FE2EC57E8D4F91B512741BD3C11F9FDC09D9F3E49492B126D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.