General
- Target target.ps1
- Size 8KB
- Sample260620-jlxdmae16v
- SHA256 442d31d0e05ed9afa4f5cd409bc9e104afd2b480703db945e22682490a8e4952
- MD5 1dba07a5c70c1872095395ab6f468baa
- SHA1 1dae209b8a83475c86d8b795cdb2971bb94e4697
- SHA512 39b03da8c3d40e8348d821be0fcd2734b970b79f77d519080181475acb10207ce1c1c5ddb3cda90b7217ca6f7d5b52632973185cc8bd4e138b3d5237205ef13b
- SSDEEP 192:6ycAEtQ3emdF609te5azTw0tjKQliveC6HFu2s:6RQ3tUGegT3bCMs2s
- TLSH T1DE02D911760561B154F367BABAC74A1FFFAE206F82550000F8ACD2882FB5C6AC775ED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
target.ps1
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
target.ps1
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target target.ps1
- Size 8KB
- SHA256 442d31d0e05ed9afa4f5cd409bc9e104afd2b480703db945e22682490a8e4952
- MD5 1dba07a5c70c1872095395ab6f468baa
- SHA1 1dae209b8a83475c86d8b795cdb2971bb94e4697
- SHA512 39b03da8c3d40e8348d821be0fcd2734b970b79f77d519080181475acb10207ce1c1c5ddb3cda90b7217ca6f7d5b52632973185cc8bd4e138b3d5237205ef13b
- SSDEEP 192:6ycAEtQ3emdF609te5azTw0tjKQliveC6HFu2s:6RQ3tUGegT3bCMs2s
- TLSH T1DE02D911760561B154F367BABAC74A1FFFAE206F82550000F8ACD2882FB5C6AC775ED9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit