MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 4c1d368d38c72f6830e21e485d08b9af6977096522d362193a9d1292675110bd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 4c1d368d38c72f6830e21e485d08b9af6977096522d362193a9d1292675110bd |
|---|---|
| SHA3-384 hash: | d268943476298687e40bc0ca1f61728f1f227b880b2e1e2f72f2d7dc8bc11af9e7e04cf53387d3466138bcd7548c264b |
| SHA1 hash: | e1a54ccd797149cc1edd45bbdc7065a82fba710b |
| MD5 hash: | eff12851945b918378d3c7c74a6ddc09 |
| humanhash: | gee-sink-wisconsin-romeo |
| File name: | va20108.ps1 |
| Download: | download sample |
| File size: | 1'288'862 bytes |
| First seen: | 2026-07-15 10:30:14 UTC |
| Last seen: | Never |
| File type: |  ps1 |
| MIME type: | text/plain |
| ssdeep | 12288:onDXOSvfG0+Fant9YnQsXEHgvulgksVGaPu+dZKX6piCQTgr:eEatCznh |
| TLSH | T11D55D7C45223D16F568E88066E4F7BDC7468D1BFC4C9A306E095AA4E64BCE2BC5D8FC1 |
| Magika | txt |
| Reporter |  aachum |
| Tags: | 204-168-223-135 dropped-by-CountLoader ps1 |
Intelligence
File Origin
# of uploads :
1
# of downloads :
104
Origin country :
ESVendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Verdict:
Unknown
File Type:
text
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
3 / 100
Behaviour
Behavior Graph:
n/a
Score:
3%
Verdict:
Benign
File Type:
SCRIPT
Gathering data
Threat name:
Text.Trojan.Generic
Status:
Suspicious
First seen:
2026-06-14 12:10:20 UTC
File Type:
Text (Python)
AV detection:
3 of 24 (12.50%)
Threat level:
5/5
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
3/10
Tags:
execution
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Command and Scripting Interpreter: PowerShell
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.30
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
ps1 4c1d368d38c72f6830e21e485d08b9af6977096522d362193a9d1292675110bd
(this sample)
Dropped by
CountLoader
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.