Extracted

Extracted

• • Target
    s.ps1
  • Size 587B
  • SHA256 04eed5ddea960ea0cf2f2c18d013de95ada3322f1ad7c8a1aa3dba4fb379937a
  • MD5 e2ce8a13076ab1b9d89bfdb7987f0194
  • SHA1 754415da9f816d7ee4acdad52ed1c06d0576311f
  • SHA512 acd2382d6bdf6d45baeae131ad9768b6c8e23c571520e560257bb7b87c2ee90f8b74f4e2553706f9185f1721f68444dee1fdb7fd496e9d581e892d265c2b2b09
  • TLSH
    T1ADF041A307A4C81880886860A328B4E2C42B695A700D4C01B5F4CE49E234B5EB2D829A
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  executionoverlordratupx

  • Detects Overlord RAT

  • Family: Overlord

    Overlord is an open-source Windows RAT written in Golang.

    ratoverlord

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2