# PowerShell Malware from 147.45.178.149

**URL:** <https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139>\
**Category:** Rule Signatures\
**Created:** [December 18, 2025, 4:16am UTC](https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139 "2025-12-18T04:16:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![pacodiazz](https://avatars.discourse-cdn.com/v4/letter/p/a587f6/32.png) [@pacodiazz](https://community.emergingthreats.net/u/pacodiazz)\
**Post date:** [December 18, 2025, 4:16am UTC](https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139/1 "2025-12-18T04:16:09Z")

</div>

(topic deleted by author)

---

<div class="post-metadata">

**Author:** ![discourse\_ai\_spam](https://avatars.discourse-cdn.com/v4/letter/d/c68b51/32.png) [@discourse\_ai\_spam](https://community.emergingthreats.net/u/discourse_ai_spam)\
**Post date:** [December 18, 2025, 6:35pm UTC](https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139/2 "2025-12-18T18:35:18Z")

</div>



---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/emergingthreats/original/1X/9ef491cea7cdd6bebd6812453ffa38f561bb97dc.png) [@system](https://community.emergingthreats.net/u/system)\
**Post date:** [December 18, 2025, 10:35pm UTC](https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139/3 "2025-12-18T22:35:33Z")

</div>



---

<div class="post-metadata">

**Author:** ![rgonzalez](https://avatars.discourse-cdn.com/v4/letter/r/bc79bd/32.png) [@rgonzalez](https://community.emergingthreats.net/u/rgonzalez)\
**Post date:** [December 18, 2025, 10:37pm UTC](https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139/4 "2025-12-18T22:37:05Z")

</div>

@ishaughnessy , appears @pacodiazz deleted?

---

<div class="post-metadata">

**Author:** ![ishaughnessy](https://sea2.discourse-cdn.com/flex016/user_avatar/community.emergingthreats.net/ishaughnessy/32/491_2.png) [@ishaughnessy](https://community.emergingthreats.net/u/ishaughnessy)\
**Post date:** [December 18, 2025, 10:54pm UTC](https://community.emergingthreats.net/t/powershell-malware-from-147-45-178-149/3139/5 "2025-12-18T22:54:33Z")

</div>

@pacodiazz - Thanks for sharing the payload with us! I got a signature in today’s release based on what you shared, let us know if you find anything else and we’re always happy to take a look!

`2066382 - ET ATTACK_RESPONSE Obfuscated PowerShell Payload Inbound`

Thanks,  
Isaac