General
- Target script.zip
- Size 705B
- Sample260819-1pg7jsw1bs
- SHA256 c375e1667bcdeaf6b1e2c865a40611ae3dd5cd96c2f1c2e1d567169cffed97ae
- MD5 f447a11a9a7dd4ff7c27695b771d50e7
- SHA1 6fc508814619a05c9f71c9b6f29d813d216d179c
- SHA512 68206e93531a5de6c0ea8431de848d189a6bbe52ded078c7b891d037f0b8de29d574483f1fdae59fe380fcadddf8aaf87c1722a1bbda39c64968986257c24852
- TLSH T17B01445B458A9BFDE899EA77014655902301829044B5E7534BC4E0832C523E12D16C9B
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
script.ps1
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
script.ps1
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target script.ps1
- Size 921B
- SHA256 11be6121db20ee527e2fa7ce88afcf88ba9322ee8ffdedfd7ae69963da177d33
- MD5 00274506100d015ec61487f81828c3a2
- SHA1 4a53d0866e9b80af92a9df1e494c62c304fe46a0
- SHA512 c637d247058151924bd846ee4dd1db66a7598ca44796b3fd3edbda9625702c4965252b77b545a216620650db0c77d27261e69452eb5fae74cd28407be502f293
- TLSH T11C110407104D152459E259A5DDD5F1E3925F0E2C98113765099EE34F0D72EFD0B9D9CC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE