General
- Target win64.ps1
- Size 3KB
- Sample260828-pl343axvdv
- SHA256 493b7760758a73725e267d3f1adc4c14bb6c73998c2934e67d21b8ad08f74438
- MD5 017dbb24d1519b8af55c5fd632dad43f
- SHA1 505bda9f7237d975f19bf5fc9f6c21c39c752546
- SHA512 d05f203e231b4beaa2c82d000a12863dd136c94cefd90e20b08454e2f01a0f25055eed6ce59ee4dd2174690576ba241245494b2d3d5f3b25b54a9f7b462c0b56
- TLSH T1D1617516E42091A46487572DEAAF7084363380B720651D04B1BD83965F62F7CC7EE7AE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
win64.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
win64.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://dl-cli.pstmn.io/download/latest/win64
Targets
-
- Target win64.ps1
- Size 3KB
- SHA256 493b7760758a73725e267d3f1adc4c14bb6c73998c2934e67d21b8ad08f74438
- MD5 017dbb24d1519b8af55c5fd632dad43f
- SHA1 505bda9f7237d975f19bf5fc9f6c21c39c752546
- SHA512 d05f203e231b4beaa2c82d000a12863dd136c94cefd90e20b08454e2f01a0f25055eed6ce59ee4dd2174690576ba241245494b2d3d5f3b25b54a9f7b462c0b56
- TLSH T1D1617516E42091A46487572DEAAF7084363380B720651D04B1BD83965F62F7CC7EE7AE
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.