General
- Target code.ps1
- Size 3KB
- Sample260805-1vmdfssxft
- SHA256 996f3762b80e3c7cfa12ac2af3fc2ed55fffdb0c78f0663eefeda588987396aa
- MD5 6205b553a9dd7f21b5c2d513beb5fc0b
- SHA1 d2b738f4f34112618c66748b860364b1a53f11f8
- SHA512 11bef14badcf46ebaa5553a02d3dc852405d96840a1178eb3ce42ef42ad2ad5dde663b6db7caa9417d810709c17e053d9ee4ba9bc85692a9e81a2244f9c6e38c
- TLSH T18251638F723A11F186C11DA1D2F32E8F820B951EC6DA0300A6699B4B2C7C97DC72C749
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
code.ps1
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
code.ps1
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
ps1.dropper
https://expertsexportorsports.top/dl-callback/372kqsdc-rqudakc5-4uc9jbdm-4ggtujyh/Helicopter.7z/fc9bca5eac9da84b631e51d867f1d8bc
-
exe.dropper
https://expertsexportorsports.top/t/7z.exe
-
exe.dropper
http://expertsexportorsports.top/t/7z.exe
-
exe.dropper
http://94.26.0.17/t/7z.exe
Targets
-
- Target code.ps1
- Size 3KB
- SHA256 996f3762b80e3c7cfa12ac2af3fc2ed55fffdb0c78f0663eefeda588987396aa
- MD5 6205b553a9dd7f21b5c2d513beb5fc0b
- SHA1 d2b738f4f34112618c66748b860364b1a53f11f8
- SHA512 11bef14badcf46ebaa5553a02d3dc852405d96840a1178eb3ce42ef42ad2ad5dde663b6db7caa9417d810709c17e053d9ee4ba9bc85692a9e81a2244f9c6e38c
- TLSH T18251638F723A11F186C11DA1D2F32E8F820B951EC6DA0300A6699B4B2C7C97DC72C749
- MD5 SHA1 SHA512 TLSH
Score3/10