General
- Target file.ps1
- Size 149B
- Sample260910-wfm9zstcja
- SHA256 59f8041977879688e484bc167efa92c0f62bb9d4df36bb4a33dd68e6e0a74749
- MD5 bdde299c931f1586a03a8408030692d2
- SHA1 fc6e481991fcd17af813e80757c84fef29260a59
- SHA512 1260b29f579ee433e55341ae0a2ca74ac303e5af0088cbac4996ee6c2fcf7a5a8fd33279f9693120b95d7b920e429aa2473f88c44451c26c1e844c14d88ca0c0
- TLSH T1C5C02BA74A080BE0A7A3C1E0A0309AC4D1334408FC94857F47E9C62F02DB3E33413C1D
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
file.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target file.ps1
- Size 149B
- SHA256 59f8041977879688e484bc167efa92c0f62bb9d4df36bb4a33dd68e6e0a74749
- MD5 bdde299c931f1586a03a8408030692d2
- SHA1 fc6e481991fcd17af813e80757c84fef29260a59
- SHA512 1260b29f579ee433e55341ae0a2ca74ac303e5af0088cbac4996ee6c2fcf7a5a8fd33279f9693120b95d7b920e429aa2473f88c44451c26c1e844c14d88ca0c0
- TLSH T1C5C02BA74A080BE0A7A3C1E0A0309AC4D1334408FC94857F47E9C62F02DB3E33413C1D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.