General
- Target Sample.ps1
- Size 4KB
- Sample260828-yerbcssfqe
- SHA256 e28a54abcbbd070268dddb8688e1ac11808a3264fcf15158e3df4fad48336ab6
- MD5 8430dc955c51d1da318983e73fa5f1a6
- SHA1 5fe190b30e909164e9695fc4162c6248dc2395b4
- SHA512 b3779e37c521c36a1b0f2d2e3ac2b209188b54baffd1c88a83e7d11a08a9a0aa84254e3ac2773d7e33105ba6c589bece82b0f41f6e2c365fa8647b53b207c334
- SSDEEP 96:+MRNU9MzcJ1e/jfyxkkjkKMcnRsMZZM19otBz:+fMcJ1eUjcysMZZMroL
- TLSH T1CBA1634AA276616500F3233AEADA48CCEE43602FC05D5124F17D82963FF4279836DFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Sample.ps1
Resource
win10v2004-20260513-en
7 signatures
600 seconds
Malware Config
Targets
-
- Target Sample.ps1
- Size 4KB
- SHA256 e28a54abcbbd070268dddb8688e1ac11808a3264fcf15158e3df4fad48336ab6
- MD5 8430dc955c51d1da318983e73fa5f1a6
- SHA1 5fe190b30e909164e9695fc4162c6248dc2395b4
- SHA512 b3779e37c521c36a1b0f2d2e3ac2b209188b54baffd1c88a83e7d11a08a9a0aa84254e3ac2773d7e33105ba6c589bece82b0f41f6e2c365fa8647b53b207c334
- SSDEEP 96:+MRNU9MzcJ1e/jfyxkkjkKMcnRsMZZM19otBz:+fMcJ1eUjcysMZZMroL
- TLSH T1CBA1634AA276616500F3233AEADA48CCEE43602FC05D5124F17D82963FF4279836DFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.