General
- Target 7cb082bfc14dda0a.ps1
- Size 1.5MB
- Sample261107-meag3aef27
- SHA256 7cb082bfc14dda0a44863ee70af57c35d7ad2ae2e83293a5c7d26f5bff56d450
- MD5 97926cb3a6a07192c1669ff957cd7ce4
- SHA1 05dd830e81dcfb17f59381d6ae6b5990c52906ea
- SHA512 907f590a43aca33ae042b9a631a367b0ae92aac493be311151c61027051422028081f7eeb39b3fd4f181b792f09912d086312e9c196c0fcd42209225ec0407b6
- SSDEEP 24576:ojdfGCfORrPfG8NncfYGtbSBlQYCkY576vvW6N3JVqWGKJ4U7z+ASj+XteyH0Avo:cfGr+FQIenCk57orKJ4UnGO0L
- TLSH T15865337C4E4E49DE4D20E3B2B71A981952DC17CB0DC6838757ADC16037B64B8CBA2DA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
7cb082bfc14dda0a.ps1
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
7cb082bfc14dda0a.ps1
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 7cb082bfc14dda0a.ps1
- Size 1.5MB
- SHA256 7cb082bfc14dda0a44863ee70af57c35d7ad2ae2e83293a5c7d26f5bff56d450
- MD5 97926cb3a6a07192c1669ff957cd7ce4
- SHA1 05dd830e81dcfb17f59381d6ae6b5990c52906ea
- SHA512 907f590a43aca33ae042b9a631a367b0ae92aac493be311151c61027051422028081f7eeb39b3fd4f181b792f09912d086312e9c196c0fcd42209225ec0407b6
- SSDEEP 24576:ojdfGCfORrPfG8NncfYGtbSBlQYCkY576vvW6N3JVqWGKJ4U7z+ASj+XteyH0Avo:cfGr+FQIenCk57orKJ4UnGO0L
- TLSH T15865337C4E4E49DE4D20E3B2B71A981952DC17CB0DC6838757ADC16037B64B8CBA2DA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Formbook payload
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Accesses Microsoft Outlook profiles
Suspicious use of SetThreadContext