0613dcc83d184ff0d8ef279d629b588e25f7eba60e12673ec260767216c82d3d.ps1

Classification: Malicious

0613dcc83d184ff0d8ef279d629b588e25f7eba60e12673ec260767216c82d3d.ps1 is a malicious file sample. Linked to Kimsuky activity.

Detection summary

  • 0 antivirus detections
  • 4 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Intrusion sets: KIMSUKY (G0094)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-06-16 11:45:03 2026-06-16 11:45:03 malicious-activity
Kimsuky MalwareBazaar Abuse.ch 2026-06-16 11:27:02 2026-06-16 11:27:02 malicious-activity G0094 Kimsuky

Tags

evasive malicious new_domain

Sample information

Filenames
0613dcc83d184ff0d8ef279d629b588e25f7eba60e12673ec260767216c82d3d.ps1, 0613dcc83d184ff0d8ef279d629b588e25f7eba60e12673ec260767216c82d3d.bin
File type
ASCII text, with very long lines (5046), with no l ...
MD5
198ac34ed66b814e8704bd83d0afd2fe
SHA-1
df13a74fcf3079163140ecb1a39a8d9a80315d83
SHA-256
0613dcc83d184ff0d8ef279d629b588e25f7eba60e12673ec260767216c82d3d
First indexed
2026-06-16 11:27:02
Last updated
2026-09-02 11:39:40

Network contacts

185.27.134.65

DNS requests

ryo.gamer.free