General
- Target client.ps1
- Size 3.1MB
- Sample260903-pjphwswhkd
- SHA256 c40317bafe39ec13bd944009bd6c53e6db8430c488433fdace6a3527b26588bb
- MD5 5d5e39c88aa10d113d4ca10a58b9ee19
- SHA1 d5203381d46a6c0b7ba960097328de620cfe358b
- SHA512 916fe371e369718ef8e89dccc0d35832b8af707c6b6c2df4a71ff53f8e3f68f75e60fdd980f3c795c2e599551f8d1f6164ef99f090c920f9faabbbe4e4edcad1
- SSDEEP 49152:7Y1wOeTfeinwRg0Yd0YtWdR2++BqkPiblNmBZOqsHtL3rdyW6JKHINYMpnkq/3+/:+
- TLSH T180E51136CA31BCD4871C3700A7251CAF21A96557D3F74E28CB162CBA3D72B52EF65988
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
client.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target client.ps1
- Size 3.1MB
- SHA256 c40317bafe39ec13bd944009bd6c53e6db8430c488433fdace6a3527b26588bb
- MD5 5d5e39c88aa10d113d4ca10a58b9ee19
- SHA1 d5203381d46a6c0b7ba960097328de620cfe358b
- SHA512 916fe371e369718ef8e89dccc0d35832b8af707c6b6c2df4a71ff53f8e3f68f75e60fdd980f3c795c2e599551f8d1f6164ef99f090c920f9faabbbe4e4edcad1
- SSDEEP 49152:7Y1wOeTfeinwRg0Yd0YtWdR2++BqkPiblNmBZOqsHtL3rdyW6JKHINYMpnkq/3+/:+
- TLSH T180E51136CA31BCD4871C3700A7251CAF21A96557D3F74E28CB162CBA3D72B52EF65988
- MD5 SHA1 SHA512 SSDEEP TLSH
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext