General
- Target 2a2d95fb5b65afd366c31aa8057712c17c3364f34ccd7d52eb7a03ca5c2f060e.unknown
- Size 5KB
- Sample260809-w8llvswzd1
- SHA256 2a2d95fb5b65afd366c31aa8057712c17c3364f34ccd7d52eb7a03ca5c2f060e
- MD5 28a9c8989fbe70d59e0997c20c0ec266
- SHA1 3f46d63477360d5dfb5f453786540cdba58e2ca1
- SHA512 fe69cd4f8b61fb441fe51929031d0f42d5c0fed10558d20bd71ccd98fcaf02f44f3be8ce2c2d2dadd1f8844b4ea63b77169afbb4dd0ca1e7e2de7600e51ad808
- SSDEEP 96:VUWMm/jFax8aP9SlXuIPpy/cWq4YX/PMhUlw/0u4dQzzXXwkEqfUrn:VDMuadP92XuIPpybYX3MhUusuvXgkEqM
- TLSH T10DB1740A5444613A91F3273A8C838254FB66527F424A2640B4BC96CA7FF172FC7A6DDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2a2d95fb5b65afd366c31aa8057712c17c3364f34ccd7d52eb7a03ca5c2f060e.ps1
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
2a2d95fb5b65afd366c31aa8057712c17c3364f34ccd7d52eb7a03ca5c2f060e.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
40 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
http://199.217.99.6/sc.msi
Targets
-
- Target 2a2d95fb5b65afd366c31aa8057712c17c3364f34ccd7d52eb7a03ca5c2f060e.unknown
- Size 5KB
- SHA256 2a2d95fb5b65afd366c31aa8057712c17c3364f34ccd7d52eb7a03ca5c2f060e
- MD5 28a9c8989fbe70d59e0997c20c0ec266
- SHA1 3f46d63477360d5dfb5f453786540cdba58e2ca1
- SHA512 fe69cd4f8b61fb441fe51929031d0f42d5c0fed10558d20bd71ccd98fcaf02f44f3be8ce2c2d2dadd1f8844b4ea63b77169afbb4dd0ca1e7e2de7600e51ad808
- SSDEEP 96:VUWMm/jFax8aP9SlXuIPpy/cWq4YX/PMhUlw/0u4dQzzXXwkEqfUrn:VDMuadP92XuIPpybYX3MhUusuvXgkEqM
- TLSH T10DB1740A5444613A91F3273A8C838254FB66527F424A2640B4BC96CA7FF172FC7A6DDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.