General
- Target run.ps1
- Size 217B
- Sample260623-v2thfsev8q
- SHA256 c9d346ae5906611fa32154b448969a3bec2408779aaf2c1eb9810c49ea705884
- MD5 fad1d062f9a1596d437e63a06cf8de3f
- SHA1 2eac5e12f1afc7fcb2a757075b2d117274394a66
- SHA512 fb5c8332bfcc7216fe8f22c6e7116720d9d0c616a3e28164600fb5ee6425aa324154d7a044f3da448ebfd3d3d8565e250c363b598054f6ee3f6380e282709f05
- TLSH T151D0A7D1372E6422C1870A6527206376DCD3A602C53106243591D959AB1159D39F4070
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
run.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
run.ps1
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target run.ps1
- Size 217B
- SHA256 c9d346ae5906611fa32154b448969a3bec2408779aaf2c1eb9810c49ea705884
- MD5 fad1d062f9a1596d437e63a06cf8de3f
- SHA1 2eac5e12f1afc7fcb2a757075b2d117274394a66
- SHA512 fb5c8332bfcc7216fe8f22c6e7116720d9d0c616a3e28164600fb5ee6425aa324154d7a044f3da448ebfd3d3d8565e250c363b598054f6ee3f6380e282709f05
- TLSH T151D0A7D1372E6422C1870A6527206376DCD3A602C53106243591D959AB1159D39F4070
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.