General
- Target file.ps1
- Size 29B
- Sample260809-arc3haxclc
- SHA256 a2746b634bc57b34a4b2cf0c13b567543ddc3e466318d7897e47cad4f4d824a6
- MD5 2352f529f6d55127b8055c7fdae28909
- SHA1 ef1db84d3bf9506f79ac490b1b41cab8c9ec9d59
- SHA512 94bf187df6d3c4e9b2814460668ff69d661bba4940be5ff1c2a2a582526503cf9f9495a69367964f8b33addbe6d56dcaf50c1fb4a60098008e10a57890e5ea89
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://agent-work.app/
Targets
-
- Target file.ps1
- Size 29B
- SHA256 a2746b634bc57b34a4b2cf0c13b567543ddc3e466318d7897e47cad4f4d824a6
- MD5 2352f529f6d55127b8055c7fdae28909
- SHA1 ef1db84d3bf9506f79ac490b1b41cab8c9ec9d59
- SHA512 94bf187df6d3c4e9b2814460668ff69d661bba4940be5ff1c2a2a582526503cf9f9495a69367964f8b33addbe6d56dcaf50c1fb4a60098008e10a57890e5ea89
- MD5 SHA1 SHA512
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.