General
- Target E18D10F2AB43.ps1
- Size 28KB
- Sample260808-wznd4awzb1
- SHA256 5dc0a9d83867ae1be8bbc36463b4627cf44aaf8dd2da025699318ffcb549e7e3
- MD5 1e3501a355847e5d61fe21cfc4f084bb
- SHA1 475318b18da9898e6aeab4d531b6f4621995263f
- SHA512 d4e1fef73629e8eedf471c2540842cead702f82b3ee88088efe4446876b4f5b704b6c473b19e69da321ea28a3efd8a6f196a4b7030a75971ea20f4e2fd5fbc5f
- SSDEEP 768:PbwMaPfAVxKbsBPzTvxFe5wgoNQ8jXJz8gWMt6UEZ5qTvgOQw2DuMOAofkg5WPwM:b3HEZ56vgOQw2DuMOAofx593c
- TLSH T19ED28366565FC52B4D731219AE62E0CFEB0352230AEF6621B9AC43506F73124F235F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
E18D10F2AB43.ps1
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
E18D10F2AB43.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target E18D10F2AB43.ps1
- Size 28KB
- SHA256 5dc0a9d83867ae1be8bbc36463b4627cf44aaf8dd2da025699318ffcb549e7e3
- MD5 1e3501a355847e5d61fe21cfc4f084bb
- SHA1 475318b18da9898e6aeab4d531b6f4621995263f
- SHA512 d4e1fef73629e8eedf471c2540842cead702f82b3ee88088efe4446876b4f5b704b6c473b19e69da321ea28a3efd8a6f196a4b7030a75971ea20f4e2fd5fbc5f
- SSDEEP 768:PbwMaPfAVxKbsBPzTvxFe5wgoNQ8jXJz8gWMt6UEZ5qTvgOQw2DuMOAofkg5WPwM:b3HEZ56vgOQw2DuMOAofx593c
- TLSH T19ED28366565FC52B4D731219AE62E0CFEB0352230AEF6621B9AC43506F73124F235F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.