General
- Target get.ps1
- Size 3KB
- Sample260823-x1v11azbla
- SHA256 b8123017200d355dacba6977171c060fc69a884e971822f9943cc628208f3d94
- MD5 4607f78b8c24c248151f436fc4b2ffc6
- SHA1 90ed65f311d9757269d62a48372a79badfdc0d6a
- SHA512 968dc2c7e1177e6b0f631736728e8d588b4951e46ca6c2f656c7013c9107235ada2972197ba903c8414e6b58988cc22a35f82a797dbe0f702fc3055f2ab07da9
- TLSH T11371D03C85485A1F6AB311EF0468A318F962513691CA5ED4B61C862CF7D372ECF720BB
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
get.ps1
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target get.ps1
- Size 3KB
- SHA256 b8123017200d355dacba6977171c060fc69a884e971822f9943cc628208f3d94
- MD5 4607f78b8c24c248151f436fc4b2ffc6
- SHA1 90ed65f311d9757269d62a48372a79badfdc0d6a
- SHA512 968dc2c7e1177e6b0f631736728e8d588b4951e46ca6c2f656c7013c9107235ada2972197ba903c8414e6b58988cc22a35f82a797dbe0f702fc3055f2ab07da9
- TLSH T11371D03C85485A1F6AB311EF0468A318F962513691CA5ED4B61C862CF7D372ECF720BB
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.