General
- Target 8263.ps1
- Size 5KB
- Sample260910-prwl6sgh86
- SHA256 84d7077ae5a86be567bf39d94b3cc39a40751958b1692ec17d89d59f97ce3bea
- MD5 21fcdda547ee851cf6c46447835b7db2
- SHA1 851137d4767e55df797513c6d06d4f58b9db4eee
- SHA512 c91dd75f88509cbba5e20fde38a6976a429ac88af42b0bd79e70964662958c688d37a81d833eef64cf5a84f9a1a4362218bb3f8bfe38711a4ae785c412eccda8
- SSDEEP 96:5838wKxGxebrOY388VYURxw4NQ99hwHg4A39/OlP8l7gdo4LVNfrXkRs:638wKxGxYqY388qURxoDhwHgTxg87gdb
- TLSH T114B10D09332162699AB52B3CCDC79C1CFF3E903B25610248749C60901FB9DAECBE9F59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
8263.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
8263.ps1
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://www.python.org/ftp/python/3.12.2/python-3.12.2-embed-amd64.zip
-
exe.dropper
https://armortra.xyz/8263.py
Targets
-
- Target 8263.ps1
- Size 5KB
- SHA256 84d7077ae5a86be567bf39d94b3cc39a40751958b1692ec17d89d59f97ce3bea
- MD5 21fcdda547ee851cf6c46447835b7db2
- SHA1 851137d4767e55df797513c6d06d4f58b9db4eee
- SHA512 c91dd75f88509cbba5e20fde38a6976a429ac88af42b0bd79e70964662958c688d37a81d833eef64cf5a84f9a1a4362218bb3f8bfe38711a4ae785c412eccda8
- SSDEEP 96:5838wKxGxebrOY388VYURxw4NQ99hwHg4A39/OlP8l7gdo4LVNfrXkRs:638wKxGxYqY388qURxoDhwHgTxg87gdb
- TLSH T114B10D09332162699AB52B3CCDC79C1CFF3E903B25610248749C60901FB9DAECBE9F59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.