General
- Target sample
- Size 7KB
- Sample260905-wl84msfb72
- SHA256 2363a7483574376e2eecfcf3ab581b1c531aa3e0695dc0d2393795cf241bae86
Score
8/10
Malware Config
Targets
-
- Target sample
- Size 7KB
- SHA256 2363a7483574376e2eecfcf3ab581b1c531aa3e0695dc0d2393795cf241bae86
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Powershell Invoke Web Request.
-
Executes dropped EXE
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory