c047511af46d25b6e945e9fc22a1f65fd2b9f3c7adf7a18317e4f86d39981d22 | Triage™

Login
Reports

Overview

overview

Static

static

Bin/avdnettest.exe

windows10-2004-x64

1

Bin/avdnettest.exe

windows11-21h2-x64

1

Bin/procdump.exe

windows10-2004-x64

3

Bin/procdump.exe

windows11-21h2-x64

3

MSRD-Collect.ps1

windows10-2004-x64

8

MSRD-Collect.ps1

windows11-21h2-x64

8

Modules/Fr...ty.ps1

windows10-2004-x64

3

Modules/Fr...ty.ps1

windows11-21h2-x64

3

Modules/Fr...UI.ps1

windows10-2004-x64

3

Modules/Fr...UI.ps1

windows11-21h2-x64

3

Modules/Fr...rs.ps1

windows10-2004-x64

3

Modules/Fr...rs.ps1

windows11-21h2-x64

3

Modules/Fr...cs.ps1

windows10-2004-x64

3

Modules/Fr...cs.ps1

windows11-21h2-x64

3

Modules/Fr...ns.ps1

windows10-2004-x64

3

Modules/Fr...ns.ps1

windows11-21h2-x64

3

Modules/Fr...le.ps1

windows10-2004-x64

3

Modules/Fr...le.ps1

windows11-21h2-x64

3

Modules/Fr...lp.ps1

windows10-2004-x64

3

Modules/Fr...lp.ps1

windows11-21h2-x64

3

Modules/Fr...ew.ps1

windows10-2004-x64

3

Modules/Fr...ew.ps1

windows11-21h2-x64

3

Modules/Fr...nu.ps1

windows10-2004-x64

3

Modules/Fr...nu.ps1

windows11-21h2-x64

3

Modules/Fr...mp.ps1

windows10-2004-x64

3

Modules/Fr...mp.ps1

windows11-21h2-x64

3

Modules/Fr...te.ps1

windows10-2004-x64

3

Modules/Fr...te.ps1

windows11-21h2-x64

3

Modules/Fr...on.ps1

windows10-2004-x64

3

Modules/Fr...on.ps1

windows11-21h2-x64

3

Modules/Fr...es.ps1

windows10-2004-x64

3

Modules/Fr...es.ps1

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
MSRD-Collect.zip
Size 4.2MB
Sample260327-phfjlafv6j
SHA256 c047511af46d25b6e945e9fc22a1f65fd2b9f3c7adf7a18317e4f86d39981d22
MD5 d5fca17c86a8ccf0fdbec63a70afc6f3
SHA1 7733f730c30fe86f7717c87efcce2bec850c3077
SHA512 4c121cd2639a7f471c72402f76e83700e413146a4067647b273ee5b5a5c373a560aa3bdc34822cdefc284e385b8227d7cc9205d4b897f2081ebde08ba595eba0
SSDEEP 98304:cEbNuFKqRWy5bamE5QlI/uzP72+84JodA75l7kTSGZW2E:DSLW55QlD72+5JodA75aT7W2E
TLSH
T16B163379C828593AD0B32EF696850174ABC5EA65605E3A9A4C7D1CCCE89F3F48FD14C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Bin/avdnettest.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Bin/avdnettest.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Bin/procdump.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Bin/procdump.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

MSRD-Collect.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

MSRD-Collect.ps1

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

Modules/Framework/GUI/MSRDCollect.Accessibility.ps1

Resource

win10v2004-20260129-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Modules/Framework/GUI/MSRDCollect.Accessibility.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Modules/Framework/GUI/MSRDCollect.GUI.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Modules/Framework/GUI/MSRDCollect.GUI.ps1

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Modules/Framework/GUI/MSRDCollect.Helpers.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

Modules/Framework/GUI/MSRDCollect.Helpers.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Modules/Framework/GUI/MSRDCollect.LiveDiagnostics.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Modules/Framework/GUI/MSRDCollect.LiveDiagnostics.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Modules/Framework/GUI/MSRDCollect.Menu.Actions.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Modules/Framework/GUI/MSRDCollect.Menu.Actions.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Modules/Framework/GUI/MSRDCollect.Menu.File.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

Modules/Framework/GUI/MSRDCollect.Menu.File.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

Modules/Framework/GUI/MSRDCollect.Menu.Help.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

Modules/Framework/GUI/MSRDCollect.Menu.Help.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

Modules/Framework/GUI/MSRDCollect.Menu.View.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

Modules/Framework/GUI/MSRDCollect.Menu.View.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Modules/Framework/GUI/MSRDCollect.Menu.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

Modules/Framework/GUI/MSRDCollect.Menu.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Modules/Framework/GUI/MSRDCollect.ProcDump.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Modules/Framework/GUI/MSRDCollect.ProcDump.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Modules/Framework/GUI/MSRDCollect.Remote.ps1

Resource

win10v2004-20260129-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

Modules/Framework/GUI/MSRDCollect.Remote.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Modules/Framework/GUI/MSRDCollect.Ribbon.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

Modules/Framework/GUI/MSRDCollect.Ribbon.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Modules/Framework/GUI/MSRDCollect.Templates.ps1

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

Modules/Framework/GUI/MSRDCollect.Templates.ps1

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper
https://learn.microsoft.com/en-us/azure/virtual-desktop/whats-new-agent#latest-available-versions

Targets

- Target
  Bin/avdnettest.exe
- Size 3.1MB
- SHA256 69371603a8036afcd9ef7aeab6d9951ff0b259cc9c538a16c0737d9ca1cf28fe
- MD5 88a1c4519513c2e90754f1f96ade7dae
- SHA1 a940cd32f62e183903e038c288b63edf6f75f440
- SHA512 070bb4a558764a5a1d538646ffb1983a0d3cdda209ce2887566a343557340e34d8e1db24fa0a38687695a5f7c2f826e25a545684aac793985ce879259f6bca8a
- SSDEEP 24576:ZCot/mf3YJ2AhggR6BDquTibG+gG4Ij028r2X7Sp1qSdc5+h+WRMX8Jdfy5x:YohIIhN6BDNTlHIA28r2XE1qSBJWXp
- TLSH
  T175E54B69EF5C1286C1F7917D4A474B06D6B2F44703326BCB01A5A6F91F67BE04F3AA80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Bin/procdump.exe
- Size 1.3MB
- SHA256 0983c50ecbb29e08a8629e7c2d68e85dd9d9cc39c59ddb919b427daace698682
- MD5 9325d80a5da74a4ca601b86b8fbc8c52
- SHA1 1ab4d7dc91a7641a446d83c51e2067d5a33f6962
- SHA512 98b9ee317117c9496f8ca33f1f3f0cebffc0653f1d1b1b04d317e034f4d6fb2c56f2bd79123ee6b230518e62e11d3ace03412057c4b6de71b8083a7766528347
- SSDEEP 24576:XPez+fAqoPVVE+Awgvu71GDzhysuz78nUI:TuVVE+2m71Gxy7z75I
- TLSH
  T1A0558D2177E94075E1B766B199B58625EA7BBC210B349ACF0384467E0F37AC09F35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  MSRD-Collect.ps1
- Size 142KB
- SHA256 98f4d8ad560a45da16bcb0a3e542b392fa60fa81330768dae58a1422d509f9a6
- MD5 4b4e4f9a9d729c67a2e30e8331262e36
- SHA1 7d3c85a8206782045eeea4c03c9088aee5c6ff12
- SHA512 da0f2b9682c574b1986b6c0bc2078750a6669c1d9d87cf77dcb9684eff284d2ea981b4bb3f5d52b65ba4e1d35734ece1a1a2aa53fdfe62e3b114dc8fa5df3dbf
- SSDEEP 3072:7ZpJe4vxsa229OrOy/t0U3dUFiAN8MIp+HOzVOG:7hsa229OrOoP3dUFLNO5OG
- TLSH
  T17EE307267A06912141FB27BCDC47A498FF1A1177136E45A0BCDCA184AFBD268C371F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral5 behavioral6
- Target
  Modules/Framework/GUI/MSRDCollect.Accessibility.psm1
- Size 19KB
- SHA256 b267f349588dfaafc2b4261bf133c4926743f404c529b9212b370ce2c3955d45
- MD5 b30691ddc9459ea8f8edb9337974b366
- SHA1 a3167551ae2b2ceebcb96ad3ca0ccb82f558bd53
- SHA512 1592a3c5a7cb813124efec849bcfb764a26ab4cb7f50c133b306a77054f4ffc7bd31d7b4c7662c57b8bc3b5e5f9d7983eb96f8ff9f46c8f48b415601b36a7491
- SSDEEP 384:hpy4SEqAdA/501e5m5iq1c5c5BAcAdA/501e5m5S5c5BAYz/BM6u5CFHcvFcYluB:hpyYSz/BGCGSYluyG+eBde7a4Bi9pxks
- TLSH
  T1D8923B39E71273160CF75C6CC51EDAE8993272239390661B348D7704DB7622C1377EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Modules/Framework/GUI/MSRDCollect.GUI.psm1
- Size 122KB
- SHA256 511d271429e61fac75f2088d266570e2386477a0f7038741bf2064e5c4fe8bf7
- MD5 4cba26e7932f229a021cc48c7a09f381
- SHA1 5ffa21960685513cc8e915ded7f6e259cd503902
- SHA512 6a6905340266fa623486ef541ca749f7b1e59806b535a9eff528724d5641cc41213c952a319a6f3f4c68b7ad2f3bcf644030254c9178f661de10737e83a56151
- SSDEEP 1536:Rejo3V7x7xwhf+9YqtgrGrxrgr6x3luduDuQk:6o3V7x7xwhf8Y5rGrxrgr03lKqbk
- TLSH
  T16AC3A2747B06A13149BA272EDC9BE580FF251037510E9869798D90C86FBD2B8C336F5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Modules/Framework/GUI/MSRDCollect.Helpers.psm1
- Size 70KB
- SHA256 b3ac567367ade41c07706a36f2d3376db1a0398bb7caa8cc42d4ba87c85abff2
- MD5 187c8304228009632d3a513d92d98c3b
- SHA1 d4d8d6f9f2e7f91c02f31039a16cbd55d9da7fb6
- SHA512 8ef0757f85faa831495d8459213cab72230c6b051078518134ae85f6f6c95453d5a961d180399e0b8730449f80e05c2ddbbf8560f7a8aeffa800e86b4198c436
- SSDEEP 768:r2mwyh35487kca9RvDiwEMDHMkKBXni+gMN4y7liwB0k3Ip+G8GpzfeUMcmE/KW4:SoCckXJKBXn6gIp+HszfeHWs
- TLSH
  T10363E879720AA07644B31728CD6BD844FF2B0173429B57657DCDC284EFB889883B5F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Modules/Framework/GUI/MSRDCollect.LiveDiagnostics.psm1
- Size 80KB
- SHA256 d337decf82a3d02cc20c75838b27d51f331b2dd0d9aea95ee2c0b912e58a6052
- MD5 094068c6d4f6d5b2c52263dd6936fe4c
- SHA1 1d23d360c24f8422609e520e5856ca2a116044a2
- SHA512 d0367a42c7ac12adaf83247d4d89db560c1b327246edb04b79302fd2e5a8c2f3f7967b87dd5f59dcb77658ed5c18ecb3434d9bc401b61c268a2411981738096c
- SSDEEP 768:cCysyck7taUijjzrAvrnZKdD53eWDa/strYfEV/RDkh3VrRQeG5M9LFglLroru/Y:cCFKaUOjQrPs3lu0yXmS7qxer
- TLSH
  T1858356517B006DA184B71F7DAC56E204FE715027825B8D2CB87CC29AAF7E1B4A723E47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Modules/Framework/GUI/MSRDCollect.Menu.Actions.psm1
- Size 95KB
- SHA256 e3983a9fd0bf4497d0dd001123b52f4ff236e9ea6c718e566e41e210e2deffa6
- MD5 6bcb921327799ffc40a7a0b1f7b64068
- SHA1 42d4c372c1534d4fc5202685fc9e98f9a6f4b35a
- SHA512 a6a1a0501503d26c24b45b1e63f061342d6a0a47737c060c17db3812338f7d83601813e821c81b623180539321d05df8ade9d94d19e9f54150d1a359807b8915
- SSDEEP 1536:Rck0GVeBR5lSglo+aLWEI6ts18mG3luZFVnz78N:6k0GVe35118mG3lOLnEN
- TLSH
  T1FAA3B7B9330EA2B146BB225BDC975880DE28013712569A613D8FD4D8EF76195C3B3B4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Modules/Framework/GUI/MSRDCollect.Menu.File.psm1
- Size 72KB
- SHA256 ab9f7cc798695f5b881390d759b564e61ffcc713816156b957ebcbfadea34f82
- MD5 37fdff69adf53d8d49d5b4cc05a55e2a
- SHA1 c5b59fa4ee55ef65d802c7561a5fd494ea8583e4
- SHA512 d03b1429bb98d4bb1ab79b785773943ec033d001824b5f602b05dcec2bea05e1167fda1566ef6684cefa2de64f7a683fd924826f2b3d57bcafd34ce17a814d6f
- SSDEEP 768:RFy+Efv3NzCjn/UW+WFbNEB0k3Ip+G8Ggz+vY2cWivxvmGx1/WN0Wi2QNj4z:R0Cjn/UW+WFbN4Ip+HVzaYd9xRWYY
- TLSH
  T1CB73C879371AD1744577222ACC6BEA40FF191133016AE5B179EEE0C4EFB9490C3B5B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Modules/Framework/GUI/MSRDCollect.Menu.Help.psm1
- Size 25KB
- SHA256 6838cec1badfe2f052bd1527233007b821abfee0a6de3d91f22feb69817eddea
- MD5 6bd862eff25b488ae087f1995b472b0a
- SHA1 2fdfd41b6ad944b19cdb99ec2dbae76bea81f497
- SHA512 ca4aa7cb070a92f35c62c011c62b0bac20f0733e7a1238f0f86824f364305a8985bc63c79e2e75187ba0c6f60130c6d8bd85f1f3524e3f70fadbe59dd3ff39cc
- SSDEEP 768:R0PyyBZami3BGCGSYluy9/Ma4BxxkDTmaHdGvXhwu:R0P8mi43lu4/v70X
- TLSH
  T115C26DB8371AE05445B35214CD3FA9D1FD29423382D1A979798ED588CF3A225C3B1BDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Modules/Framework/GUI/MSRDCollect.Menu.View.psm1
- Size 17KB
- SHA256 0b2c9d782a7ac9ae6e25101f9ac14623de09816f1b140505ac109937c9fb741d
- MD5 acdda5f62858b87543cbf060152720b7
- SHA1 af206501abac10075f6ec5a70bae4717fbfa275e
- SHA512 718d68aa7ee2ab808ade49d1e1d7651620abf50b716ade7505d308ca27317cbc06053023dbae24095cbb6e4154572a56d5b59639dc2068d678bf518d46457a23
- SSDEEP 384:fJszSQnqyxjSWBM6u5CFHcvFcYlugL+8fV/NGNZa4B+YK6gkDTm+GWKUufvXFamP:R/iqyBSWBGCGSYlugL+kNcZa4B+SgkDq
- TLSH
  T186829D722E523150083786E8D5AB56F9F924C21747F10AA6380CB964CF34B3616E3EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Modules/Framework/GUI/MSRDCollect.Menu.psm1
- Size 49KB
- SHA256 4b97c07dddf4c806f7c9183c4acf1e7e890c40a9b3b6ac35f02bac38502d4145
- MD5 a17428bba9a25eb9468752c4a4b2a6e3
- SHA1 87e2d8e3d6997898dfe507a06b9e9546f842afc1
- SHA512 18b98134ad5f2418fddadaa3d3a68dae0219702acd953f46b66096fc8734c64c7b7f309da2526eb605756f2290ec7e276b57a850946a18fb70a3f33120a2e361
- SSDEEP 768:cy0xyxs6wrYr+5/lz+ZQZBGCGSYlugLULSei7a4BRbtPkDTmaXSlX5nc:cUsLlBe3lux/iQ7wnc
- TLSH
  T1833386B9364362A087352634C5A769A0EC20242B5B3346A9BF4DD0585F7ABD783F7F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Modules/Framework/GUI/MSRDCollect.ProcDump.psm1
- Size 22KB
- SHA256 8b6686559cd3137e11f871832bcd37f648a206e4712ce1bbdd2d1092abe61d89
- MD5 f9b477c3a3b7039fb6fc88945c59ee71
- SHA1 1fa6a98d8d71d1fc33151db2efedecf64442437d
- SHA512 05c57c5bbb9299785fde87ba6b339218664a96a41d52b870453bd3cca83e83e6423a4c075518fcf8df27e106cc26414a1439787b60f4d0c524e21581bdf2f6a4
- SSDEEP 384:DpghGMQU3CIAP7QJc5Mgy0BM6u5CFHcvFcYlugLb8xyrAa4BoYkDTm+GWKUuUyXd:tgEMQU3CIARBGCGSYlugLbHAa4BoYkDq
- TLSH
  T15BA26D32BB14A2580CB38855C95A6A96DF04521317E261B4B68CD4C4AF33FB1C3E6BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Modules/Framework/GUI/MSRDCollect.Remote.psm1
- Size 21KB
- SHA256 b9b9b0f63e55f898621c4f553d2014a139fc57bba4211469bc7876be41923e9b
- MD5 1b2d622e03adc012e02afa3d717ea467
- SHA1 a73d3ff902cbf9c11e288800dc7e559260a0970e
- SHA512 74f74582178887d1038e389c09ce446644025ba946c68950e27eaeaa411bde5b67a221604d2eab5d30322ed3dd5bcbb5c083510018d35f84041b4669684831ad
- SSDEEP 384:+DNQizN7AbY/xscyPuneBM6u5CFHcvFcYluy68ZIf/ya4BBn7LrdkDTm+GWKcdGQ:+ZQJbY/mcyLBGCGSYluy6wIfqa4Bxxk3
- TLSH
  T19AA28DB21B812126097B4239F53A96B5E611405773F31F66F58DE8508F387A883F3EDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Modules/Framework/GUI/MSRDCollect.Ribbon.psm1
- Size 36KB
- SHA256 2d161c113d273802bcc671ee960970b7c17b171bda699d29b9103fabe398b629
- MD5 620b86e7710c167c487e413b3b253833
- SHA1 895a9c5e84f2acb6ab33bed89a27fede2af4a035
- SHA512 cb66a96857ec48bfe28cf98a1cc744ac5fcd6a61a05593179a51002781ba03ccc9a24ff3848a5a780e6a39bfa39c79b82fe1453fae34e890916816362246171f
- SSDEEP 768:63hyE7wIiM4sw9IBGCGSYlugLkwapIa4Ba7NeXkDTmaXWvX1n:63r03lujwapz7Nb7qn
- TLSH
  T18E034A39B315612908B3822DED1FA544FF1650271192EE4A38CED5C4AFBD464C37AF9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Modules/Framework/GUI/MSRDCollect.Templates.psm1
- Size 21KB
- SHA256 896c14bebf6689662578d107f084557f852906234458cc058c2f3feaf3785ee5
- MD5 fc31a9fd3965ce5e18fc5887f3d82075
- SHA1 f408b80f44fa2ed5995b536a1e567585ac57a7bb
- SHA512 90b4775f60a12af870f866c3b83e6f99ee863b135fec3d0bf620fca7e3deda5489b4c8991e12ac775f39d875160f98cddbdef4839426fffe56989c59528d19bb
- SSDEEP 384:FkwkRyMDwF6IAlmmkr4+sWszie8BM6u5CFHcvFcYlugLNP84tf/ZGNZa4B+YK6gm:FkwgyMD810Q4+6zB8BGCGSYlugLNPftm
- TLSH
  T1A4A26DB6265132201A3BD57CD81AD170FB20D12B86E75A3B384D64581FB8B7582F3DDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy