General
- Target load
- Size 1KB
- Sample260626-amt58agy3m
- SHA256 f2cf2d240dac85e267987f30b8e73ef6a1ca5c90f618aabea570b1bb17fd9aa1
- MD5 664f21546ad5da89e7947f7acf29e981
- SHA1 8df3dae6328f8e0ccbf485538fb03e40f8296325
- SHA512 250f507bef574c21c0471f2b762bea95fac763fa05d8e068e57464f01f998e1acc3544f3da982d7e911602d8c9e949d83b84e7214ad89c4ef0dc431cc3c29ae9
- TLSH T17C31B713F2915615520FD6E3FCA57221FED90CD485D5079C925CC67CBEC34AC726913A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
load.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
load.ps1
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target load
- Size 1KB
- SHA256 f2cf2d240dac85e267987f30b8e73ef6a1ca5c90f618aabea570b1bb17fd9aa1
- MD5 664f21546ad5da89e7947f7acf29e981
- SHA1 8df3dae6328f8e0ccbf485538fb03e40f8296325
- SHA512 250f507bef574c21c0471f2b762bea95fac763fa05d8e068e57464f01f998e1acc3544f3da982d7e911602d8c9e949d83b84e7214ad89c4ef0dc431cc3c29ae9
- TLSH T17C31B713F2915615520FD6E3FCA57221FED90CD485D5079C925CC67CBEC34AC726913A
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.