General
- Target start.ps1
- Size 574KB
- Sample261113-pcwcvsbs3x
- SHA256 3131284e25346ec82850977927be4e90fb6bfbe65d601b0d23c36f744d59ca3b
- MD5 f985c30c759e06cbfe5083ade7086234
- SHA1 1e5383a5e923bd821938bcca8ebb76168bc09e57
- SHA512 947018e907c3906bc2370e9f08c198b9df1527759b520973f3af115180ad6cc998271e18012c2ce9f8ccb4e9e4499a3d10170509870ed3425b6d9d626d29bea7
- SSDEEP 12288:nxXFQKZDIS05X58kDYWFfCBufQBERaXosWMO2RmmFeuattDi3NbCjy:xeKZD059Ty
- TLSH T19CC47E747B022EFF5BB820C248DA811D563C26B5C9682CF569CB4CA7390D77927B79B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
start.ps1
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target start.ps1
- Size 574KB
- SHA256 3131284e25346ec82850977927be4e90fb6bfbe65d601b0d23c36f744d59ca3b
- MD5 f985c30c759e06cbfe5083ade7086234
- SHA1 1e5383a5e923bd821938bcca8ebb76168bc09e57
- SHA512 947018e907c3906bc2370e9f08c198b9df1527759b520973f3af115180ad6cc998271e18012c2ce9f8ccb4e9e4499a3d10170509870ed3425b6d9d626d29bea7
- SSDEEP 12288:nxXFQKZDIS05X58kDYWFfCBufQBERaXosWMO2RmmFeuattDi3NbCjy:xeKZD059Ty
- TLSH T19CC47E747B022EFF5BB820C248DA811D563C26B5C9682CF569CB4CA7390D77927B79B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Suspicious use of SetThreadContext