General
- Target loader.ps1
- Size 209B
- Sample260621-lpc59sdv5v
- SHA256 dfe4def41e3c347ffbdfe2a4cc14b7baae5e208b4b85408e7c068e4d3a907367
- MD5 c81d61b783ba87c59b0d0e79781dff3d
- SHA1 d6866b658c5e57e6fff785bdff6cea9995eb7eed
- SHA512 4caadeea80bf16107890d166ce9eacb62e679e6f33d968375ce5de7fc8ad12f4d9b48b7cbce3972a454b9cbf453723752638e5820a1b3b1af7ddf3be7939018b
- TLSH T188D0C9212D985B975258979E822486E01EF15102895EF9B10FD8548B3C41AA2C651D59
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
loader.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.ps1
Resource
win11ltsc2024-20260618-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target loader.ps1
- Size 209B
- SHA256 dfe4def41e3c347ffbdfe2a4cc14b7baae5e208b4b85408e7c068e4d3a907367
- MD5 c81d61b783ba87c59b0d0e79781dff3d
- SHA1 d6866b658c5e57e6fff785bdff6cea9995eb7eed
- SHA512 4caadeea80bf16107890d166ce9eacb62e679e6f33d968375ce5de7fc8ad12f4d9b48b7cbce3972a454b9cbf453723752638e5820a1b3b1af7ddf3be7939018b
- TLSH T188D0C9212D985B975258979E822486E01EF15102895EF9B10FD8548B3C41AA2C651D59
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.