General
- Target Data.ps1
- Size 226KB
- Sample260815-xwpy7aszb1
- SHA256 1050e7ca3b05cc57187f2ac7bed5ccb2b49150ac0ef4a8f4ee686dab61eaa330
- MD5 82c671a0a90270e7ef85cb9a9cc879fd
- SHA1 3ae8183472627a4a226c2eb8d57c2994e8f0a137
- SHA512 32ee02e5a6140f8b04768d632d9b4c3accf3ac63d53118ee1c6cf62173a653a6b78deb3820317d9b0bf484184fa080a1486381ac105866daa432a89c424f7882
- SSDEEP 6144:zJWX3fn2e5toAy+7Cdnkatz5W48RrEYnCvRr/FBQaPBKq+u2DnfHte:IfBYtzQTQYQzNqe
- TLSH T1953430822305E67CF2CE0AF2AC0B0464A1F9C915F99F5449B7B16DD77B7AA801934FC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Data.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Data.ps1
- Size 226KB
- SHA256 1050e7ca3b05cc57187f2ac7bed5ccb2b49150ac0ef4a8f4ee686dab61eaa330
- MD5 82c671a0a90270e7ef85cb9a9cc879fd
- SHA1 3ae8183472627a4a226c2eb8d57c2994e8f0a137
- SHA512 32ee02e5a6140f8b04768d632d9b4c3accf3ac63d53118ee1c6cf62173a653a6b78deb3820317d9b0bf484184fa080a1486381ac105866daa432a89c424f7882
- SSDEEP 6144:zJWX3fn2e5toAy+7Cdnkatz5W48RrEYnCvRr/FBQaPBKq+u2DnfHte:IfBYtzQTQYQzNqe
- TLSH T1953430822305E67CF2CE0AF2AC0B0464A1F9C915F99F5449B7B16DD77B7AA801934FC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.