General
- Target verify.ps1
- Size 323B
- Sample260808-zncd8syvfy
- SHA256 648eef77fb1ddac9e1107322ad269353a974c5abd59fccfc2a127f3d3b6d8cbf
- MD5 56d5a5c30726c9566bb947929357d7d5
- SHA1 79788a5be344f2a40fc87b8cb83ae663e8ca843e
- SHA512 8871291f8789a74aa95fb770660ffccec1dab3e1363fb7091ec61b014e45e5c2d198d2491fe9cf3b57056e039cdf3a1073d2d9735caeb487df98de918c0679fa
- TLSH T1BFE07D89D28BC3F8088E02E3911C58ACC11D01E286E52C309FA5C9D4A5821CDD58B3B5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
verify.ps1
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
https://verificator.cc/encrypted/api.ps1
-
exe.dropper
https://verificator.cc/encrypted/api.ps1
Targets
-
- Target verify.ps1
- Size 323B
- SHA256 648eef77fb1ddac9e1107322ad269353a974c5abd59fccfc2a127f3d3b6d8cbf
- MD5 56d5a5c30726c9566bb947929357d7d5
- SHA1 79788a5be344f2a40fc87b8cb83ae663e8ca843e
- SHA512 8871291f8789a74aa95fb770660ffccec1dab3e1363fb7091ec61b014e45e5c2d198d2491fe9cf3b57056e039cdf3a1073d2d9735caeb487df98de918c0679fa
- TLSH T1BFE07D89D28BC3F8088E02E3911C58ACC11D01E286E52C309FA5C9D4A5821CDD58B3B5
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.