General
- Target history_stealer.ps1
- Size 9KB
- Sample260820-ryq2dayglc
- SHA256 9b95888ead3d43f107515b5d83f61ab4b903d4439f152d7f4679a55774fdb6eb
- MD5 20e110cb3493ccae5191fe33bc07d99a
- SHA1 007a2ac12446b3c036a4e92aaee9f3c58644a7ee
- SHA512 66f5be42af1dbed5ddf24f59b399c05e46d1774ebe21ccc31a0256048ebef6f9a5cb06c6adcfe06dc0519092f1392b80be44755a0e4069f027cdb619bf1a69da
- SSDEEP 192:09v5tZtZlMZtMZRZlLsfcStZnruZnjZ7PyPinZxSCWZJREXZs1Z8fZt4wZkNgCIy:09hXXlstsTpsUmrG9FIfEgezkNgCJdGi
- TLSH T11512C75BEBF6ECA0C647D872BC89644869488117CE181C09F9CC86DC6F90B34F7DA6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
history_stealer.ps1
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
history_stealer.ps1
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://discord.com/api/webhooks/1529256819283857641/jKLcDEoLcYLRbAbgcDOWvI_XeJmH6zNy4TRjXkVKneyvdDNLd_80H7OWAWbvOvO0Mmcc
-
exe.dropper
https://cdn.discordapp.com/attachments/1494761277761917048/1528522900984959076/image0.jpg?ex=6a6095a2&is=6a5f4422&hm=2a201a4d1f96feda40173cf3a0334d5f6436b643954d4c1a930c877dd09cc196&
-
exe.dropper
https://www.sqlite.org/2023/sqlite-tools-win-x64-3440200.zip
Targets
-
- Target history_stealer.ps1
- Size 9KB
- SHA256 9b95888ead3d43f107515b5d83f61ab4b903d4439f152d7f4679a55774fdb6eb
- MD5 20e110cb3493ccae5191fe33bc07d99a
- SHA1 007a2ac12446b3c036a4e92aaee9f3c58644a7ee
- SHA512 66f5be42af1dbed5ddf24f59b399c05e46d1774ebe21ccc31a0256048ebef6f9a5cb06c6adcfe06dc0519092f1392b80be44755a0e4069f027cdb619bf1a69da
- SSDEEP 192:09v5tZtZlMZtMZRZlLsfcStZnruZnjZ7PyPinZxSCWZJREXZs1Z8fZt4wZkNgCIy:09hXXlstsTpsUmrG9FIfEgezkNgCJdGi
- TLSH T11512C75BEBF6ECA0C647D872BC89644869488117CE181C09F9CC86DC6F90B34F7DA6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10