General
- Target stage1_decode.ps1
- Size 632KB
- Sample260804-j58wrsfh77
- SHA256 11ebc625039ecda7f68edacfcbc7f6090e9e243cc0c1245efb967a601a9738be
- MD5 af92e1dd9b994a4c2d0b698c9ca28cd4
- SHA1 7a33af459d9aa20b4e18c0177051ffc73baae507
- SHA512 620f6e896cb7b93686ebf392424f2fe1ca7c36cb7b70681cb4f9c40647dcc401169da1329ababe3789ca160d8267071814e7936fa8be6497d5a882f8ba92beef
- SSDEEP 12288:c3Rc52DepxZmfeWSB0fTl+1mARiff/Qd2op4YhgmrB5rSQ/pPoD:cc9pxZmGWSBeTl+BWHZKdWyoD
- TLSH T10ED42331EF22055A8F55822B80EFE85E63515F42940DB5EFE7CF84E10B98783AE4F468
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
stage1_decode.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
stage1_decode.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://nodejs.org/dist/v26.4.0/node-v26.4.0-win-x64.zip
Targets
-
- Target stage1_decode.ps1
- Size 632KB
- SHA256 11ebc625039ecda7f68edacfcbc7f6090e9e243cc0c1245efb967a601a9738be
- MD5 af92e1dd9b994a4c2d0b698c9ca28cd4
- SHA1 7a33af459d9aa20b4e18c0177051ffc73baae507
- SHA512 620f6e896cb7b93686ebf392424f2fe1ca7c36cb7b70681cb4f9c40647dcc401169da1329ababe3789ca160d8267071814e7936fa8be6497d5a882f8ba92beef
- SSDEEP 12288:c3Rc52DepxZmfeWSB0fTl+1mARiff/Qd2op4YhgmrB5rSQ/pPoD:cc9pxZmGWSBeTl+BWHZKdWyoD
- TLSH T10ED42331EF22055A8F55822B80EFE85E63515F42940DB5EFE7CF84E10B98783AE4F468
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10