General
- Target test.txt
- Size 233B
- Sample260625-jrmrdah19s
- SHA256 69f67d706ec266ecea5bbd616d885e85a9b7389b3d90d37db2bff23bafd41c90
- MD5 f5224c49397d87e4765750e45df32d98
- SHA1 22948b0f622f3a647742c2699685240bab4df38b
- SHA512 96931370a3a0f58c671369aef53a34e26928f24b5d44319864b0f0f7a5318d52e539c94da66e68e11c39cf5f3c4217408059d71faf783ab401a35675e3f07cbf
- TLSH T182D0A74B0B1E4019830015D459632A78A833B4364791ADDD568058C7D5CA269D8B6CF5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
test.txt
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
test.txt
Resource
win11ltsc2024-20260617-en
1 signatures
300 seconds
Malware Config
Targets
-
- Target test.txt
- Size 233B
- SHA256 69f67d706ec266ecea5bbd616d885e85a9b7389b3d90d37db2bff23bafd41c90
- MD5 f5224c49397d87e4765750e45df32d98
- SHA1 22948b0f622f3a647742c2699685240bab4df38b
- SHA512 96931370a3a0f58c671369aef53a34e26928f24b5d44319864b0f0f7a5318d52e539c94da66e68e11c39cf5f3c4217408059d71faf783ab401a35675e3f07cbf
- TLSH T182D0A74B0B1E4019830015D459632A78A833B4364791ADDD568058C7D5CA269D8B6CF5
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.