General
- Target start.ps1
- Size 671KB
- Sample260818-wyk8cazset
- SHA256 c4afc85919cef7c0736db66dd115a7bf2cc0d0571588a33cabf2c6007f6034b9
- MD5 1be0ba6a5253ca8c6753913227d9f2dc
- SHA1 32aff66591656375d0eecf846c44fa5a204c6c79
- SHA512 a1780723e2db775cdbf5f6b7fbd0b677ec52cbd3c621af7cd2fc8f75ea835fc15b19f27e94bafae52db07e1577f05fd761e50a2b5f8c0b2506825d234c9bb52d
- SSDEEP 6144:dX/4alypwqjRdhfNd8lgFoydFS6thaFmG7R7eFhPMhOiaFi9PoO8Jx2xVPw24pXd:dgwqtdlldFhthaFmCRCMhOiaJP/2Mv
- TLSH T1EFE46D30BE462EFF5BA820C248C9C11C563832B9CA682DF565CB4C97391D77A17B79B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.ps1
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 671KB
- SHA256 c4afc85919cef7c0736db66dd115a7bf2cc0d0571588a33cabf2c6007f6034b9
- MD5 1be0ba6a5253ca8c6753913227d9f2dc
- SHA1 32aff66591656375d0eecf846c44fa5a204c6c79
- SHA512 a1780723e2db775cdbf5f6b7fbd0b677ec52cbd3c621af7cd2fc8f75ea835fc15b19f27e94bafae52db07e1577f05fd761e50a2b5f8c0b2506825d234c9bb52d
- SSDEEP 6144:dX/4alypwqjRdhfNd8lgFoydFS6thaFmG7R7eFhPMhOiaFi9PoO8Jx2xVPw24pXd:dgwqtdlldFhthaFmCRCMhOiaJP/2Mv
- TLSH T1EFE46D30BE462EFF5BA820C248C9C11C563832B9CA682DF565CB4C97391D77A17B79B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext