General
- Target malware.ps1.ps1
- Size 155B
- Sample260810-s9166axxet
- SHA256 d196dfe4ba2c5ef09cbb4fefa06fc87abf308cf912ed62348eab182fecfdecc5
- MD5 a4ea012703e434fc5b896bdccb3f5949
- SHA1 e5ddb7d380fb1648b2b8e5ea835eba86c27779b4
- SHA512 b6f5b3a64b8796ba6a3c4859cfa6adb87813a14eae68f8169c07cc18b3b76a47688e333a8bda6356dd96793a60e2427084725df19f36974f49eed4910f3c02fb
- TLSH T104C08C24688545276B90A032F92EDDC925302EC47A82E972B4BB6AD865F32B0D60319B
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
malware.ps1
Resource
win10v2004-20260513-en
11 signatures
120 seconds
Behavioral task
behavioral2
Sample
malware.ps1
Resource
win11ltsc2024-20260709-en
3 signatures
120 seconds
Malware Config
Targets
-
- Target malware.ps1.ps1
- Size 155B
- SHA256 d196dfe4ba2c5ef09cbb4fefa06fc87abf308cf912ed62348eab182fecfdecc5
- MD5 a4ea012703e434fc5b896bdccb3f5949
- SHA1 e5ddb7d380fb1648b2b8e5ea835eba86c27779b4
- SHA512 b6f5b3a64b8796ba6a3c4859cfa6adb87813a14eae68f8169c07cc18b3b76a47688e333a8bda6356dd96793a60e2427084725df19f36974f49eed4910f3c02fb
- TLSH T104C08C24688545276B90A032F92EDDC925302EC47A82E972B4BB6AD865F32B0D60319B
- MD5 SHA1 SHA512 TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.