General
- Target test.ps1
- Size 2KB
- Sample260803-qb831ayfle
- SHA256 2fb018393ae9855ce6d6b5850988ac61f3a1b11246ae7bf82f993654d5888da0
- MD5 313c7f55394144bf5abfed247ce81e21
- SHA1 aa61135cd6d044c784524af50eaf6dca3417a11e
- SHA512 bf470ef32fab39e26fa44482e740a6e8d19ff27d00e873c2cededda7435c353e0785485c0f23be43626f610bb554e3c6e708b099ed8937b781a2aa8c04308cb0
- TLSH T1A1413F22450392594EF0401B9D31EF54FF6A432BAA981885B18C98C4BFFC85ED448AFB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
test.ps1
Resource
win10v2004-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral2
Sample
test.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
30 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
ps1.dropper
https://sweet-snowflake-8a7e.uploadesclintesss.workers.dev/LKFDo
-
exe.dropper
https://sweet-snowflake-8a7e.uploadesclintesss.workers.dev/LKFDo
Targets
-
- Target test.ps1
- Size 2KB
- SHA256 2fb018393ae9855ce6d6b5850988ac61f3a1b11246ae7bf82f993654d5888da0
- MD5 313c7f55394144bf5abfed247ce81e21
- SHA1 aa61135cd6d044c784524af50eaf6dca3417a11e
- SHA512 bf470ef32fab39e26fa44482e740a6e8d19ff27d00e873c2cededda7435c353e0785485c0f23be43626f610bb554e3c6e708b099ed8937b781a2aa8c04308cb0
- TLSH T1A1413F22450392594EF0401B9D31EF54FF6A432BAA981885B18C98C4BFFC85ED448AFB
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.