General
- Target run.ps1
- Size 776B
- Sample261014-aejdrasy2m
- SHA256 28180cd47c231b7d2d08b707e1bb8c39d148bf04a75ceafba7a3365264e91027
- MD5 5e127a6f925d0ec2e81c25aa97d5129c
- SHA1 c798aa53a313a42173e5c4876ea84a932bce8ab2
- SHA512 bffe91ce024cfed3645b7199e395d493f9ce81fc9c492d9b3595938457cfb69b8a933d6e2434e2035740bafc7c4f4e5565b9a3eda67fa71dce85f92c5d31f96d
- TLSH T13201DC0EBD222A2882914606CF63A3AEAD4B50FC055B020432FEC3159E2C81B4FE8334
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
run.ps1
Resource
win11-20260911-en
5 signatures
900 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://karmazarbaza.com/2Uq
Targets
-
- Target run.ps1
- Size 776B
- SHA256 28180cd47c231b7d2d08b707e1bb8c39d148bf04a75ceafba7a3365264e91027
- MD5 5e127a6f925d0ec2e81c25aa97d5129c
- SHA1 c798aa53a313a42173e5c4876ea84a932bce8ab2
- SHA512 bffe91ce024cfed3645b7199e395d493f9ce81fc9c492d9b3595938457cfb69b8a933d6e2434e2035740bafc7c4f4e5565b9a3eda67fa71dce85f92c5d31f96d
- TLSH T13201DC0EBD222A2882914606CF63A3AEAD4B50FC055B020432FEC3159E2C81B4FE8334
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.