General
- Target RoCookieNew2.ps1
- Size 4KB
- Sample260804-szhbashn3z
- SHA256 52366fc94ad8d84187801d562ad3b58bca0b6b58022760f2987e1855699a7045
- MD5 13566f1b13b4b8ab54132ef7f2378eea
- SHA1 be06651c67b65015356ee7104f5497a6f0c99a9c
- SHA512 be14c7a5ea599895a664663e156c5324643bca5a76cb8d3a1a84f58a6b3490fc170dee90336cafe6859aae887e1c42065db7804c849cc7e378edffb30541c25a
- SSDEEP 96:M4imPEGdjZtUvNtDIOSIWuI0t4ieV9EOD:i4EGRU1BNG75
- TLSH T1A29132454587DB2C92F0C72AB94932A9FF19046F1B012525B29D8581DFF0B8AC7FC7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
RoCookieNew2.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://dropout-stack.github.io/hacking.github.io/RoCookie.zip
Targets
-
- Target RoCookieNew2.ps1
- Size 4KB
- SHA256 52366fc94ad8d84187801d562ad3b58bca0b6b58022760f2987e1855699a7045
- MD5 13566f1b13b4b8ab54132ef7f2378eea
- SHA1 be06651c67b65015356ee7104f5497a6f0c99a9c
- SHA512 be14c7a5ea599895a664663e156c5324643bca5a76cb8d3a1a84f58a6b3490fc170dee90336cafe6859aae887e1c42065db7804c849cc7e378edffb30541c25a
- SSDEEP 96:M4imPEGdjZtUvNtDIOSIWuI0t4ieV9EOD:i4EGRU1BNG75
- TLSH T1A29132454587DB2C92F0C72AB94932A9FF19046F1B012525B29D8581DFF0B8AC7FC7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.