General
- Target how-tf-do-you-use-ibis-paint-v0-5sfvzk3vp60h1.webp
- Size 2KB
- Sample260822-wb8ecsssh1
- SHA256 fe089f92c7e99ffaa9e8d4ea205ce10fc5a502e232db614e616245845d18177b
Score
8/10
Malware Config
Targets
-
- Target how-tf-do-you-use-ibis-paint-v0-5sfvzk3vp60h1.webp
- Size 2KB
- SHA256 fe089f92c7e99ffaa9e8d4ea205ce10fc5a502e232db614e616245845d18177b
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.