General
- Target number
- Size 1KB
- Sample260627-wt3ltsct8x
- SHA256 79aa6540aad70cc84fbb9d6874804ee86b6bfc2c703822a8d9c34f5a838e5304
- MD5 afd76af72e694f07c446a5a194500e74
- SHA1 2f0b528d127904c4e64f75c77db8dbdd53dea555
- SHA512 00b884dcf8fa31dc828e1f7a6418eb8be40844c1689885ab71636eb51dc6ec7f4a522bebde86ed72c28fb3632b2701aa4fa8a4c8703d15b080623af3c38cb551
- TLSH T14331DB33F1919021520FD5A1E8A57115FEC90DA486EA13EC918C87BCFFC79DC617963A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
number.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
number.ps1
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target number
- Size 1KB
- SHA256 79aa6540aad70cc84fbb9d6874804ee86b6bfc2c703822a8d9c34f5a838e5304
- MD5 afd76af72e694f07c446a5a194500e74
- SHA1 2f0b528d127904c4e64f75c77db8dbdd53dea555
- SHA512 00b884dcf8fa31dc828e1f7a6418eb8be40844c1689885ab71636eb51dc6ec7f4a522bebde86ed72c28fb3632b2701aa4fa8a4c8703d15b080623af3c38cb551
- TLSH T14331DB33F1919021520FD5A1E8A57115FEC90DA486EA13EC918C87BCFFC79DC617963A
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.