General
- Target 58892dcb08a37950.ps1
- Size 1.4MB
- Sample261020-rb72daz1bs
- SHA256 58892dcb08a37950e5e7d9ee713d0c720a58c7b974ba0095698198e51d68fecb
- MD5 97d43a8277d6af47b6b71d86ccd5fe4b
- SHA1 a08233e42a34e5c89c7093cb0ea3263861e56b23
- SHA512 7802503515b420b0a022b0845396d8e8fb14a029346335fabda0897dc7280e0b29a741f761dd3a1249d9b0412b2aeaa4c699f7fadbd04858f195a5f541fffd47
- SSDEEP 24576:+8wlTlOc6Ox0cpewC62M1wgW12exCCHXKbxa4eMMI1Ok+O7YPhz3u/DrB:jNcpewoM1CAeabQDOaBubt
- TLSH T15D6523388CCB16EB081099B6FE31B14D52DD52C38D41436B637CCBB93BF45589AA7E62
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
58892dcb08a37950.ps1
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
58892dcb08a37950.ps1
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 58892dcb08a37950.ps1
- Size 1.4MB
- SHA256 58892dcb08a37950e5e7d9ee713d0c720a58c7b974ba0095698198e51d68fecb
- MD5 97d43a8277d6af47b6b71d86ccd5fe4b
- SHA1 a08233e42a34e5c89c7093cb0ea3263861e56b23
- SHA512 7802503515b420b0a022b0845396d8e8fb14a029346335fabda0897dc7280e0b29a741f761dd3a1249d9b0412b2aeaa4c699f7fadbd04858f195a5f541fffd47
- SSDEEP 24576:+8wlTlOc6Ox0cpewC62M1wgW12exCCHXKbxa4eMMI1Ok+O7YPhz3u/DrB:jNcpewoM1CAeabQDOaBubt
- TLSH T15D6523388CCB16EB081099B6FE31B14D52DD52C38D41436B637CCBB93BF45589AA7E62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Formbook payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext