Extracted

• • Target
    cc.ps1.ps1
  • Size 2KB
  • SHA256 a6ba8b5a9edf9eaeb6ed6899908f287a498d4eb9a36f2468407609b5e4d1fab0
  • MD5 639439f439336adb9d261523f54c39d7
  • SHA1 80ac2a0900b787105c9813d080b92d0226e9d53f
  • SHA512 c41e8eb48e0e861e6c9c93b3bf0886bad79dd684e9c9ca03038d99f57ff4a04ca633b4f7108000a3991f44e693854606bf2863902af6ff6b7b8ce86af6c74bec
  • TLSH
    T16751952A8407533211F00399C71B995FAA1B416F07318A8576BA40CD3CF66BF8FAC94E
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  adwareexecutionpersistenceransomwarespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1