General
- Target start.ps1
- Size 604KB
- Sample260810-wyhr8aep71
- SHA256 e1eddd2f0df92a4d7e56561d26a0a9a81e7e019d011410dc777fd9c45e462939
- MD5 dff97751a6f3f36cec11171e5c736d54
- SHA1 c86659d1066746104c9fe64fed35e9f78849751e
- SHA512 7e62d2d6ed8e66b2bfbc2ab51269924eba17d3e0e147c6e25481c63d507dfcde052b0d7247b9814d15633da235cc5cc9c73fa517868802c7a71c55640f81d574
- SSDEEP 12288:vZv9Y/sPQk443g0LU2t5u23rZW8mslckZnsa:vZVFHLA23rg8mslckZX
- TLSH T1DDD47E707A422EFF5BA820C248C5C11C563C36B9C9682DF56ACB4CA3390D77627B79B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.ps1
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 604KB
- SHA256 e1eddd2f0df92a4d7e56561d26a0a9a81e7e019d011410dc777fd9c45e462939
- MD5 dff97751a6f3f36cec11171e5c736d54
- SHA1 c86659d1066746104c9fe64fed35e9f78849751e
- SHA512 7e62d2d6ed8e66b2bfbc2ab51269924eba17d3e0e147c6e25481c63d507dfcde052b0d7247b9814d15633da235cc5cc9c73fa517868802c7a71c55640f81d574
- SSDEEP 12288:vZv9Y/sPQk443g0LU2t5u23rZW8mslckZnsa:vZVFHLA23rg8mslckZX
- TLSH T1DDD47E707A422EFF5BA820C248C5C11C563C36B9C9682DF56ACB4CA3390D77627B79B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext