Extracted

• • Target
    fakemas.ps1
  • Size 3KB
  • SHA256 b2bdb2a4e93fb7d4e2d6f87fc27e8016f64b31a53d373bf34c1ceeec02875041
  • MD5 388636d04a2e5f85c93f67db34fd7722
  • SHA1 18347b54073f7d63bd85553d29e3751918c61ea3
  • SHA512 d7fa38ac092b1ecb642f9c15462479b8e3b73fae78fb1654ee0b3794947c7eac8eb929038af3e720251b4dddc92172e3f0643216f976123030880bbfad91e8de
  • TLSH
    T1C461A85AB7D0E2B18AB31919CCC5A795643B407221135610B2BD87547F9CD9FC7A33CA
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  discoveryexecutionpersistence

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2