cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e | Triage™

Login
Reports

Overview

overview

5

Static

static

1

cf0c4bd755...3e.ps1

windows10-2004-x64

5

cf0c4bd755...3e.ps1

windows11-21h2-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e.ps1
Size 1.9MB
Sample260422-sd7n3ahw5n
SHA256 cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e
MD5 b45130450037a154f4c82b99cf0be826
SHA1 aaa983b407018e03c3c2c7af08c8d15562571aa3
SHA512 310123191809093158bb91f321a36749343b895d11645b5e06c915c9ecafa0c86987d62eabf6b888537e59695cea0e7e9539884a04e7b7a8aeb56cd73e016d7f
SSDEEP 24576:GR8kv05SYpoiSNE21WLxDnpcEjjL4JePAtxdPgO7IqwIzt++Xsz9RvnPbVyLme07:WLOG4xN4HQBYcjDlHhRKw7OaUHby
TLSH
T17E953374EDACACFA076C452871AF7E1F2EF68DCA884EF10354A924C3509F7594E4686C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

8 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e.ps1

Resource

win11-20260130-en

windows11-21h2-x64

6 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e.ps1
- Size 1.9MB
- SHA256 cf0c4bd75514dd15d850eb633f67da9137fd5de14cefdca8173baa5d3e4cf93e
- MD5 b45130450037a154f4c82b99cf0be826
- SHA1 aaa983b407018e03c3c2c7af08c8d15562571aa3
- SHA512 310123191809093158bb91f321a36749343b895d11645b5e06c915c9ecafa0c86987d62eabf6b888537e59695cea0e7e9539884a04e7b7a8aeb56cd73e016d7f
- SSDEEP 24576:GR8kv05SYpoiSNE21WLxDnpcEjjL4JePAtxdPgO7IqwIzt++Xsz9RvnPbVyLme07:WLOG4xN4HQBYcjDlHhRKw7OaUHby
- TLSH
  T17E953374EDACACFA076C452871AF7E1F2EF68DCA884EF10354A924C3509F7594E4686C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution

© 2018-2026

Terms | Privacy