General
- Target lol.ps1
- Size 7KB
- Sample260803-lpg48agk6y
- SHA256 02c7932d0c67d33f0c7071bcb069698c1cfa1f82c0083158caf66b94673a6b76
- MD5 8851043b29e5d17dd2b200ff4217283c
- SHA1 5939c919e9cffa3e826b89621e469f5cfac61d58
- SHA512 1aad0940888d5f7f330a5d1439314eadc60e4126ee644bc66c5a889085e53434d9e810d4d403d89f5f8e816c6b60a734f7abd9472c0682702788dc889d226944
- SSDEEP 192:pCmGjSuvyZALriath8qJyUZLMFfC5dHE5mpyK:VG+uvyZHaP8qJyYoFfC3HDyK
- TLSH T1B2E197216712471E0AF387B19816F0D0FA46412F42892C50F99DC44D7FFA19AD4A7FAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lol.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
lol.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target lol.ps1
- Size 7KB
- SHA256 02c7932d0c67d33f0c7071bcb069698c1cfa1f82c0083158caf66b94673a6b76
- MD5 8851043b29e5d17dd2b200ff4217283c
- SHA1 5939c919e9cffa3e826b89621e469f5cfac61d58
- SHA512 1aad0940888d5f7f330a5d1439314eadc60e4126ee644bc66c5a889085e53434d9e810d4d403d89f5f8e816c6b60a734f7abd9472c0682702788dc889d226944
- SSDEEP 192:pCmGjSuvyZALriath8qJyUZLMFfC5dHE5mpyK:VG+uvyZHaP8qJyYoFfC3HDyK
- TLSH T1B2E197216712471E0AF387B19816F0D0FA46412F42892C50F99DC44D7FFA19AD4A7FAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.