General
- Target VencordInstaller.ps1
- Size 13.2MB
- Sample260625-27d4aafx9v
- SHA256 fe3e3e7c5c177bf3c1da4a65d424dd48ac8b36a7ca115aba783807b56c7e6b08
- MD5 fef2ca7ea413f8142c275b0af7d700d3
- SHA1 1e6dc875ddc363070212dfdadb0b42f15e49cd97
- SHA512 db305595b5b32691f3ebff05486c32428ff9f9578ed9bbeaa60826570c77ce998819f86887362d5f25e8454e75c860e064c954fc4e5c104c05425287c40b5566
- SSDEEP 49152:+OWLZu4BTztFfFkffpDQNymHt4g6ALyz3s12laaP0sEaX0e4z60wEH0lYhIqeOq5:5
- TLSH T172D67D720653BCBD3EAC3D8594012D845C5D3A4B6679D249BFCC30BA63EE5A88D2CDB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
VencordInstaller.ps1
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
VencordInstaller.ps1
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target VencordInstaller.ps1
- Size 13.2MB
- SHA256 fe3e3e7c5c177bf3c1da4a65d424dd48ac8b36a7ca115aba783807b56c7e6b08
- MD5 fef2ca7ea413f8142c275b0af7d700d3
- SHA1 1e6dc875ddc363070212dfdadb0b42f15e49cd97
- SHA512 db305595b5b32691f3ebff05486c32428ff9f9578ed9bbeaa60826570c77ce998819f86887362d5f25e8454e75c860e064c954fc4e5c104c05425287c40b5566
- SSDEEP 49152:+OWLZu4BTztFfFkffpDQNymHt4g6ALyz3s12laaP0sEaX0e4z60wEH0lYhIqeOq5:5
- TLSH T172D67D720653BCBD3EAC3D8594012D845C5D3A4B6679D249BFCC30BA63EE5A88D2CDB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.