General
- Target script.ps1
- Size 740B
- Sample260906-y6348sdb74
- SHA256 5d2730b007d20167b978eae68a5c5ad0c42c0f0cab415acaf1cd80fc43c10c28
- MD5 fb83041c83bfd78cfcbf8f9cc94c7045
- SHA1 e099c990c88a2f4b83ae9f3ea5d002518ec22667
- SHA512 70ccdc2fbc4456ba42333d2237afbf3fc1c2a509ba93e4d750b51379188c493cc767b88b55ee2925c8b9e48a79c25eea3c41b646cb0e5ab04d69e570f303001c
- TLSH T1FD016D929B8791B11A5C893B9A462923C449A41AE8873460E8D2D7F11489A37F0EB761
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
script.ps1
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
script.ps1
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target script.ps1
- Size 740B
- SHA256 5d2730b007d20167b978eae68a5c5ad0c42c0f0cab415acaf1cd80fc43c10c28
- MD5 fb83041c83bfd78cfcbf8f9cc94c7045
- SHA1 e099c990c88a2f4b83ae9f3ea5d002518ec22667
- SHA512 70ccdc2fbc4456ba42333d2237afbf3fc1c2a509ba93e4d750b51379188c493cc767b88b55ee2925c8b9e48a79c25eea3c41b646cb0e5ab04d69e570f303001c
- TLSH T1FD016D929B8791B11A5C893B9A462923C449A41AE8873460E8D2D7F11489A37F0EB761
- MD5 SHA1 SHA512 TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.