General
- Target RooCookieNew2.ps1
- Size 2KB
- Sample260804-qzl85ssala
- SHA256 0da0ceefc1c5f699716ed23ec72ecb2d95ca3ef77f40c48124e323ad59c7375a
- MD5 1f7cc376b0a0830a1411b3bdde090339
- SHA1 47034c764a3c580cf11f96b2e5bca7e46ddb4a40
- SHA512 c7fbefc4e6a5f796e327c083b7bf83a95e9d9dcdbfabefb8d36a6d7b578dd5c816a6cf673c8224c3499988ecef965ec2b96fbe5f6c04e1278e94f0669226603a
- TLSH T1B0513F455587D73882F0876AF9482299EF25406F1B011414F2AD8285DFB0FDB8BEC7CA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
RooCookieNew2.ps1
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://dropout-stack.github.io/hacking.github.io/RoCookie.zip
Targets
-
- Target RooCookieNew2.ps1
- Size 2KB
- SHA256 0da0ceefc1c5f699716ed23ec72ecb2d95ca3ef77f40c48124e323ad59c7375a
- MD5 1f7cc376b0a0830a1411b3bdde090339
- SHA1 47034c764a3c580cf11f96b2e5bca7e46ddb4a40
- SHA512 c7fbefc4e6a5f796e327c083b7bf83a95e9d9dcdbfabefb8d36a6d7b578dd5c816a6cf673c8224c3499988ecef965ec2b96fbe5f6c04e1278e94f0669226603a
- TLSH T1B0513F455587D73882F0876AF9482299EF25406F1B011414F2AD8285DFB0FDB8BEC7CA
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.