General
- Target file.ps1
- Size 225B
- Sample260807-ak8wlaxtc1
- SHA256 c5349ea2aaaf0b966c35bd6e731f4313fe4795ce76044be514152511c15e30d7
- MD5 9b938b776dd22808c8c150f5cf999cd0
- SHA1 e915e9dcbe858993407c986cb0648a5ac2f0b84d
- SHA512 a6e85b42423e6eaaf40d77fc9d5c16a7aae7900f4d9a2e9e1dd765aae7f2d83e23039cde20ee7061c88afd7165d0a1766cc5a79647571da72d557d0b9043aed1
- TLSH T1CED0A7646A064769C4F2C0E334F0074ED5829975915E2C7A1448645019A14C12D8224A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
http://file.optikl.ink/poc.hta
Targets
-
- Target file.ps1
- Size 225B
- SHA256 c5349ea2aaaf0b966c35bd6e731f4313fe4795ce76044be514152511c15e30d7
- MD5 9b938b776dd22808c8c150f5cf999cd0
- SHA1 e915e9dcbe858993407c986cb0648a5ac2f0b84d
- SHA512 a6e85b42423e6eaaf40d77fc9d5c16a7aae7900f4d9a2e9e1dd765aae7f2d83e23039cde20ee7061c88afd7165d0a1766cc5a79647571da72d557d0b9043aed1
- TLSH T1CED0A7646A064769C4F2C0E334F0074ED5829975915E2C7A1448645019A14C12D8224A
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.