General
- Target install.ps1
- Size 29KB
- Sample260623-pgmlhscx3k
- SHA256 ab7d7864801e62f92aa3abf878e3b0aaa8b9f7de03120bc81b029f67281c1842
- MD5 e83ffa6e0bb98455a18a4d01b57e830a
- SHA1 95c1ce4e64314ad0ddb0715b8b453335a3ad6e76
- SHA512 fad8ec3241b9bbf732e42c7b152b639d19a2c1fe7937b879c57fdd0b82be434c81041aa145e02650fd44be9556a94e2f94faf51dad88dc770a3cfb1bf8e51f2b
- SSDEEP 768:kGR6hSqqDRfo8hLZ8hS1PvjjyKPqjUDXv/eBYYUs:kGR68JA0npfyKPQuhs
- TLSH T191D2B70578F02570529627BE9CDE0018361E602F611C5F18BCFE5784BF9A33C8BB6BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
install.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.ps1
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target install.ps1
- Size 29KB
- SHA256 ab7d7864801e62f92aa3abf878e3b0aaa8b9f7de03120bc81b029f67281c1842
- MD5 e83ffa6e0bb98455a18a4d01b57e830a
- SHA1 95c1ce4e64314ad0ddb0715b8b453335a3ad6e76
- SHA512 fad8ec3241b9bbf732e42c7b152b639d19a2c1fe7937b879c57fdd0b82be434c81041aa145e02650fd44be9556a94e2f94faf51dad88dc770a3cfb1bf8e51f2b
- SSDEEP 768:kGR6hSqqDRfo8hLZ8hS1PvjjyKPqjUDXv/eBYYUs:kGR68JA0npfyKPQuhs
- TLSH T191D2B70578F02570529627BE9CDE0018361E602F611C5F18BCFE5784BF9A33C8BB6BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.