General
- Target file01.ps1
- Size 9KB
- Sample261013-w18reshs91
- SHA256 88b72b80ddd9e7be420bf09d3ed72376a7fc05550607d01b5da6c0a9ce74006d
- MD5 335584244d7a541980b891205c0d3e3e
- SHA1 c68e7c1582a020e583915ccd635f4e8eb259a378
- SHA512 94cb0dcad5dbaf8c407724352d03189ed0bb53e9b3567d74b859dc8f706960fd0525770df8aca7fd884bbec42f00b75cb4be440cb3575f7ff59981138a337b8e
- SSDEEP 192:3zQSH7j9WhR7cEiPo9YYS2kIqIaIEyl0r8YF8EgGe/:3zQS39vNUjZaIEm0gfGe/
- TLSH T15A12C71B6C02956542B2C2B2F5E39182FF21407BE55E268A746C81CC2FB5B56C3ADD8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
file01.ps1
Resource
win10ltsc2021-20260911-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target file01.ps1
- Size 9KB
- SHA256 88b72b80ddd9e7be420bf09d3ed72376a7fc05550607d01b5da6c0a9ce74006d
- MD5 335584244d7a541980b891205c0d3e3e
- SHA1 c68e7c1582a020e583915ccd635f4e8eb259a378
- SHA512 94cb0dcad5dbaf8c407724352d03189ed0bb53e9b3567d74b859dc8f706960fd0525770df8aca7fd884bbec42f00b75cb4be440cb3575f7ff59981138a337b8e
- SSDEEP 192:3zQSH7j9WhR7cEiPo9YYS2kIqIaIEyl0r8YF8EgGe/:3zQS39vNUjZaIEm0gfGe/
- TLSH T15A12C71B6C02956542B2C2B2F5E39182FF21407BE55E268A746C81CC2FB5B56C3ADD8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory