General
- Target run.ps1
- Size 3KB
- Sample260822-1f5w9ack7z
- SHA256 5d07cf4bba3c5c84a31c5072575c44792f7d0b7f55bafef0385645a20077ef60
- MD5 5427b5dc23ff7077d34f811354fa8cda
- SHA1 748579200c0d679502e40759ce093d03dd649730
- SHA512 3c1ba0fc661b3eb9d02d63509e6eb1bd987e0d588dc72a95200fec829e7be4816f2cbd9a4fc5a8f7c120500fcb32114651b9b0ead030608d4f08f68d67400331
- TLSH T14A615F16437ED72CC2664467C96BE0EFCC2E46774618F2042FAFD510E6CD168427A3E9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
run.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
run.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://github.com/harrcest28-cell/xbE1/releases/download/ud/ransom.exe
Targets
-
- Target run.ps1
- Size 3KB
- SHA256 5d07cf4bba3c5c84a31c5072575c44792f7d0b7f55bafef0385645a20077ef60
- MD5 5427b5dc23ff7077d34f811354fa8cda
- SHA1 748579200c0d679502e40759ce093d03dd649730
- SHA512 3c1ba0fc661b3eb9d02d63509e6eb1bd987e0d588dc72a95200fec829e7be4816f2cbd9a4fc5a8f7c120500fcb32114651b9b0ead030608d4f08f68d67400331
- TLSH T14A615F16437ED72CC2664467C96BE0EFCC2E46774618F2042FAFD510E6CD168427A3E9
- MD5 SHA1 SHA512 TLSH
Score6/10