General
- Target malware2.ps1.ps1
- Size 251B
- Sample260820-wasmhssdpb
- SHA256 9ad06afbce2ec119dbcad48f530befce3771e0a5c759d9902ca832aa8f26bd39
- MD5 eac4bbb9d92e7696a07f37b025d9da09
- SHA1 4bfb26dabe1eeca60265d48d34287c8a1aa3943a
- SHA512 e948cc01c467df919ff01d7157fc3fa1f6028cdf53f33784bbc2d89df3f661b485c09be5870aa74b3e2ad2518b8c186a11600b5144764660629f8f11e1b4297d
- TLSH T184D0973222719351960BC90D7633518090861A6B98CB3FB4FCF54DC1AC112922ECA8C8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
malware2.ps1
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
malware2.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
http://89.34.90.217/2agdrse7-zjhtj5yt-e8bzg5pg-ana9vc6n/56941.7z
Targets
-
- Target malware2.ps1.ps1
- Size 251B
- SHA256 9ad06afbce2ec119dbcad48f530befce3771e0a5c759d9902ca832aa8f26bd39
- MD5 eac4bbb9d92e7696a07f37b025d9da09
- SHA1 4bfb26dabe1eeca60265d48d34287c8a1aa3943a
- SHA512 e948cc01c467df919ff01d7157fc3fa1f6028cdf53f33784bbc2d89df3f661b485c09be5870aa74b3e2ad2518b8c186a11600b5144764660629f8f11e1b4297d
- TLSH T184D0973222719351960BC90D7633518090861A6B98CB3FB4FCF54DC1AC112922ECA8C8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.