General
- Target install.ps1
- Size 2KB
- Sample260905-gzjctafp2x
- SHA256 515d36a710b4a2c19d8011443439cd1b87e6261214fd404bc08ef4e441ea5cf9
- MD5 b5b3e7d21e9ee1cfb15fc69b98904e82
- SHA1 385ef05a1c2e196c7d2decedcb0518c26ed7c24e
- SHA512 fa6b0a35399a8898f9d274db8a6f404d7b6dc230f4a8c42cef0f23186ec23b9dd6f715a46e56448ea957138f377549b4a5c9388e2bcf25de3ccb9802a045cdd0
- TLSH T14D514529854843BE16831DEF48D24A88FEFD226F525D4588785EC490BFC252CC3153EF
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
install.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.ps1
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target install.ps1
- Size 2KB
- SHA256 515d36a710b4a2c19d8011443439cd1b87e6261214fd404bc08ef4e441ea5cf9
- MD5 b5b3e7d21e9ee1cfb15fc69b98904e82
- SHA1 385ef05a1c2e196c7d2decedcb0518c26ed7c24e
- SHA512 fa6b0a35399a8898f9d274db8a6f404d7b6dc230f4a8c42cef0f23186ec23b9dd6f715a46e56448ea957138f377549b4a5c9388e2bcf25de3ccb9802a045cdd0
- TLSH T14D514529854843BE16831DEF48D24A88FEFD226F525D4588785EC490BFC252CC3153EF
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.