Overview

overview

10

Static

static

10

deepseek_p...d0.ps1

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    deepseek_powershell_20260912_b9f7d0.ps1
  • Size 2KB
  • Sample260912-nt1s8sba38
  • SHA256 b4a869f41ffc8a00a88549f591310d8ed5643060ecf948e7f93ae371cf64d795
  • MD5 SHA1 SHA512 TLSH
Score
10/10
defense_evasiondiscoveryexecutionpersistencepyinstallerransomware

Malware Config

Extracted

Language

  • ps1

Source
URLs
  • exe.dropper

    https://github.com/xzxzxxzxzzx/CANTTELL/releases/download/XD/zmuerte.da.goat.exe

Targets

    • Target
      deepseek_powershell_20260912_b9f7d0.ps1
    • Size 2KB
    • SHA256 b4a869f41ffc8a00a88549f591310d8ed5643060ecf948e7f93ae371cf64d795
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistencepyinstallerransomware

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks