General
- Target ps.ps1
- Size 9.0MB
- Sample260331-y3yeksd12q
- SHA256 ce000e83cdf7ee21e9eb2ec81ff65b6d6b553ae8d22251e8a46c9319c84fe801
- MD5 75919229f4ec647c86d67057b273e6ca
- SHA1 2b03f6711b1ac28c3fb21417b9dcc81ac2e3ea52
- SHA512 96fada9f40abc7b202f92378417cece3d1d294f7aa3f399890d8bacab925f64ad52a162d1b6c56918b6622766b2c8dc7c385debad2b06bec72d8d3ee9e0eaf3f
- SSDEEP 49152:72+yw7k1IvGaA1UzZtUUQEoxzhmYIDO7HP4in0RFblMKkp1max1:w
- TLSH T11B967CB88B84975EAE6E1A07E078571E67F37F26D09271FC5A62370B266FC081639C44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ps.ps1
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
ps.ps1
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target ps.ps1
- Size 9.0MB
- SHA256 ce000e83cdf7ee21e9eb2ec81ff65b6d6b553ae8d22251e8a46c9319c84fe801
- MD5 75919229f4ec647c86d67057b273e6ca
- SHA1 2b03f6711b1ac28c3fb21417b9dcc81ac2e3ea52
- SHA512 96fada9f40abc7b202f92378417cece3d1d294f7aa3f399890d8bacab925f64ad52a162d1b6c56918b6622766b2c8dc7c385debad2b06bec72d8d3ee9e0eaf3f
- SSDEEP 49152:72+yw7k1IvGaA1UzZtUUQEoxzhmYIDO7HP4in0RFblMKkp1max1:w
- TLSH T11B967CB88B84975EAE6E1A07E078571E67F37F26D09271FC5A62370B266FC081639C44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
Netsupport family
Drops startup file
Executes dropped EXE
Loads dropped DLL