General
- Target 2.ps1
- Size 2KB
- Sample260814-mrrl4sssfw
- SHA256 271ab55626cbb8f0aa7ce578a4e1c6b58338ca53659e7f6c384b62c804942d43
- MD5 cf6ee676462dbfd30683e688e5c5d8cb
- SHA1 1d2656285487be9c38c790b057e419a27f94e3da
- SHA512 744b03c5688111f7122eef8ede9a1848de992975311451f37fcb3e30b3438d344d490f44dcfda4094f19f7f908054bff95c7b39c7635a06cdc28eb35900eb862
- TLSH T1F9514243277643A5C7FA8F49E4D257258C1FE73D021F060A746C96187EA16EFC3A5A8C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2.ps1
Resource
win10v2004-20260513-de
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
2.ps1
Resource
win11ltsc2024-20260709-de
7 signatures
900 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://kololjrdtgted.click/zip.php
Targets
-
- Target 2.ps1
- Size 2KB
- SHA256 271ab55626cbb8f0aa7ce578a4e1c6b58338ca53659e7f6c384b62c804942d43
- MD5 cf6ee676462dbfd30683e688e5c5d8cb
- SHA1 1d2656285487be9c38c790b057e419a27f94e3da
- SHA512 744b03c5688111f7122eef8ede9a1848de992975311451f37fcb3e30b3438d344d490f44dcfda4094f19f7f908054bff95c7b39c7635a06cdc28eb35900eb862
- TLSH T1F9514243277643A5C7FA8F49E4D257258C1FE73D021F060A746C96187EA16EFC3A5A8C
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.