e7e7806d23b660ae2b9d59277003677682bf32834882eb3e781ec93d86e09be1.ps1

Classification: Malicious

e7e7806d23b660ae2b9d59277003677682bf32834882eb3e781ec93d86e09be1.ps1 is a malicious file sample. Linked to Poshc2 malware.

Detection summary

  • 0 antivirus detections
  • 1 IDS alerts
  • 1 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: POSHC2 (S0378)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-02-01 12:45:03 2024-02-01 13:30:06
PoshC2 MalwareBazaar Abuse.ch 2024-01-22 15:41:33 2024-01-22 15:41:33 malicious-activity S0378 PoshC2

Tags

njrat rat

Sample information

Filenames
e7e7806d23b660ae2b9d59277003677682bf32834882eb3e781ec93d86e09be1.ps1, nVX7Zrz0.posh
File type
text/plain
Size
1952 bytes
MD5
91d6123f8c63d298b7640d688a153c7d
SHA-1
28b9fd9db2609c8f425c6f98ad16100cd277ca12
SHA-256
e7e7806d23b660ae2b9d59277003677682bf32834882eb3e781ec93d86e09be1
First indexed
2024-01-24 12:21:15
Last updated
2026-03-24 08:11:20

Network contacts

162.125.1.14

DNS requests

content.dropboxapi.com

Process list

NameCommand line
powershell.exe-f "C:\e7e7806d23b660ae2b9d59277003677682bf32834882eb3e781ec93d86e09be1.ps1"