General
- Target ClickFix.ps1.ps1
- Size 70B
- Sample260811-3vckcsvbjc
- SHA256 bf74419e55fc63c132f0f492c4db52d906a55813c671181ab4f6e620e695da15
- MD5 d99abb7116f300766b039d6bcb8b5787
- SHA1 ce23e4c15966b047d82bc4504ab5a46e8a72037d
- SHA512 c66ea43e57b00438ed6df35610b6b3d3cd7f210adb1c247232456517d8b194dc17414afa95b55a633089682c8e0e9951feca842f22a8ab0c8aa19fd9d4036df9
- TLSH T1F4A022C08C83C300220CB008C032ABC8CB2020A808322CAB8EA082CF2EF2EA0C00C800
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ClickFix.ps1
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target ClickFix.ps1.ps1
- Size 70B
- SHA256 bf74419e55fc63c132f0f492c4db52d906a55813c671181ab4f6e620e695da15
- MD5 d99abb7116f300766b039d6bcb8b5787
- SHA1 ce23e4c15966b047d82bc4504ab5a46e8a72037d
- SHA512 c66ea43e57b00438ed6df35610b6b3d3cd7f210adb1c247232456517d8b194dc17414afa95b55a633089682c8e0e9951feca842f22a8ab0c8aa19fd9d4036df9
- TLSH T1F4A022C08C83C300220CB008C032ABC8CB2020A808322CAB8EA082CF2EF2EA0C00C800
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger