General
- Target PSExpress_Package.msixbundle
- Size 234.6MB
- Sample260824-26dfcszycw
- SHA256 2cc407599126f02d2b6dbcb532e6a4d2ec2a229647f9aa9acf189840dad0b116
- MD5 436dfd01105e22ee9560d58dc7c2f554
- SHA1 79a8fb3d29648bd1ca7ccb1c1872232eedee42c8
- SHA512 7b6f8ce115841e58808110e34b6e386f198c120772b27343e0b673f04371ded97ced9f7a112f8171d0c81852d3336398d0956b1e54e3fd0964cb12005dc12eb0
- SSDEEP 6291456:o8GEb9jc4mES9+p3KKI/6yDeTgaw/WImB:o+jc4mEc96+eTgH+ImB
- TLSH T18CC833D6E4A4B959D437093E099272D0613780A19472EC27B74C136A8FD7FC41AFAACF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
PSExpress_Package.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
PSExpress_Package.zip
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target PSExpress_Package.msixbundle
- Size 234.6MB
- SHA256 2cc407599126f02d2b6dbcb532e6a4d2ec2a229647f9aa9acf189840dad0b116
- MD5 436dfd01105e22ee9560d58dc7c2f554
- SHA1 79a8fb3d29648bd1ca7ccb1c1872232eedee42c8
- SHA512 7b6f8ce115841e58808110e34b6e386f198c120772b27343e0b673f04371ded97ced9f7a112f8171d0c81852d3336398d0956b1e54e3fd0964cb12005dc12eb0
- SSDEEP 6291456:o8GEb9jc4mES9+p3KKI/6yDeTgaw/WImB:o+jc4mEc96+eTgH+ImB
- TLSH T18CC833D6E4A4B959D437093E099272D0613780A19472EC27B74C136A8FD7FC41AFAACF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL