General
- Target file01.ps1
- Size 5KB
- Sample260806-1h9yzs1dmd
- SHA256 c500db45218e609edcd3e1420f4e58169f9a2d6c8848e32c1370346243b5a6b7
- MD5 dbd67f353d9cf1eba7968e0aa9e9030d
- SHA1 cb9fe59aabab7033f6cc9232cb0bf9a526010a0b
- SHA512 303fce8a6cd344374a2f198416a1dd059c08dadff3501d6312f84d857c0b5cea2b1e4f63addf533fa8584980a04e700c0395fdac01cf59aed76999c4c2cc1029
- SSDEEP 96:5XVekJrC7j9JXaPzBcZLDN4N1jFOXHB/Jw/z9WYgW9vylVL11THroqNCdEa4XUTL:5XV9J2V9N4NNFeHB/2/w7Vx1TtgEaHTL
- TLSH T122B1D6A1321EE538A76094029DC3D648FF366621436D95F4F48CE901FFE540DC279EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file01.ps1
Resource
win10v2004-20260513-en
17 signatures
600 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://xiansearch.com/xext?i=
Targets
-
- Target file01.ps1
- Size 5KB
- SHA256 c500db45218e609edcd3e1420f4e58169f9a2d6c8848e32c1370346243b5a6b7
- MD5 dbd67f353d9cf1eba7968e0aa9e9030d
- SHA1 cb9fe59aabab7033f6cc9232cb0bf9a526010a0b
- SHA512 303fce8a6cd344374a2f198416a1dd059c08dadff3501d6312f84d857c0b5cea2b1e4f63addf533fa8584980a04e700c0395fdac01cf59aed76999c4c2cc1029
- SSDEEP 96:5XVekJrC7j9JXaPzBcZLDN4N1jFOXHB/Jw/z9WYgW9vylVL11THroqNCdEa4XUTL:5XV9J2V9N4NNFeHB/2/w7Vx1TtgEaHTL
- TLSH T122B1D6A1321EE538A76094029DC3D648FF366621436D95F4F48CE901FFE540DC279EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.