General
- Target z4Sv.ps1
- Size 18KB
- Sample260805-lfrbjayxe1
- SHA256 297f7c0a30764a1111f65c560e44af8174a0d2c294ebba65050f88b8f9f9fabf
- MD5 729a904f07f6560a0c5038d00ade0643
- SHA1 dc944ffd452e867eac1437ecfdc757f6713f8219
- SHA512 050de581a52c202a730fa54e6d472f6e8a94dc4d8c3805a146b7e51077f9742a14cb5d9892065849ea3d6603837c8304da89a883964aefb94df8ac307c48b0c3
- SSDEEP 384:xPftVPTtzPftVPTtWd379l3H93XaIZXMI/XaIdXMILhN379l3H93u3FlelGdHsbj:gBu37vHsb7i85phAwqK1X
- TLSH T17A82118736E7F4DDC45CB3F63108A2B035DAEE15895AC24CF2DA8F6F385D5866204E91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
z4Sv.ps1
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
z4Sv.ps1
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target z4Sv.ps1
- Size 18KB
- SHA256 297f7c0a30764a1111f65c560e44af8174a0d2c294ebba65050f88b8f9f9fabf
- MD5 729a904f07f6560a0c5038d00ade0643
- SHA1 dc944ffd452e867eac1437ecfdc757f6713f8219
- SHA512 050de581a52c202a730fa54e6d472f6e8a94dc4d8c3805a146b7e51077f9742a14cb5d9892065849ea3d6603837c8304da89a883964aefb94df8ac307c48b0c3
- SSDEEP 384:xPftVPTtzPftVPTtWd379l3H93XaIZXMI/XaIdXMILhN379l3H93u3FlelGdHsbj:gBu37vHsb7i85phAwqK1X
- TLSH T17A82118736E7F4DDC45CB3F63108A2B035DAEE15895AC24CF2DA8F6F385D5866204E91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE