General
- Target powershell-stage2.ps1
- Size 244KB
- Sample260815-grthtaeb58
- SHA256 443f8d200f34118a39a44515e273ab4ccd0410948e6236afec0be544dee469fb
- MD5 803eb027b14fa82ea0683b92eacc9a24
- SHA1 000c0628ba6b85460257a1815fccbebf33bb56bf
- SHA512 9a9417b798924468f1615f4c825552bea4911083867b0b248d3b92dbdd5fd2ca4ec8bb562c37074926b77cf40b9bde02b22729c83f5363ba0bd68f98bd151266
- SSDEEP 6144:ka5mch1d4UkSmFRXsKK71uSwdgoelpLkh7NZW5As6VAQZMz/DYm:kumGH47R2ucLkh7DgALej/DJ
- TLSH T15C342326DA21BAEFC36DD22D202A6344108A8FCDDD4D8CDC9E7EF981461D6EC816D44F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
powershell-stage2.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
powershell-stage2.ps1
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target powershell-stage2.ps1
- Size 244KB
- SHA256 443f8d200f34118a39a44515e273ab4ccd0410948e6236afec0be544dee469fb
- MD5 803eb027b14fa82ea0683b92eacc9a24
- SHA1 000c0628ba6b85460257a1815fccbebf33bb56bf
- SHA512 9a9417b798924468f1615f4c825552bea4911083867b0b248d3b92dbdd5fd2ca4ec8bb562c37074926b77cf40b9bde02b22729c83f5363ba0bd68f98bd151266
- SSDEEP 6144:ka5mch1d4UkSmFRXsKK71uSwdgoelpLkh7NZW5As6VAQZMz/DYm:kumGH47R2ucLkh7DgALej/DJ
- TLSH T15C342326DA21BAEFC36DD22D202A6344108A8FCDDD4D8CDC9E7EF981461D6EC816D44F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.