General
- Target New Text Document.txt
- Size 53B
- Sample260701-e9v39agt71
- SHA256 2c766f9bfa43eb659b9199f077260b29311fba8522d508655290ffb4f31ad320
- MD5 fd3c405a6417722b80dbe51c3657dc2c
- SHA1 4854ea8fc86f82e3e80fd1003f9669eff7fa6452
- SHA512 9566b7ca83fd8f4f6f2c03d41cbb461907eb23f065b476e3d346a146e478518f14b5f3ddb622d7cd716fc3436bc395873eb047cee9bd89fc81e16aaa25ee7aab
- TLSH T1889002ABE97400192E18525125159D685953791998A851AD53414E00100D6654798453
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
New Text Document.txt
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Text Document.txt
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target New Text Document.txt
- Size 53B
- SHA256 2c766f9bfa43eb659b9199f077260b29311fba8522d508655290ffb4f31ad320
- MD5 fd3c405a6417722b80dbe51c3657dc2c
- SHA1 4854ea8fc86f82e3e80fd1003f9669eff7fa6452
- SHA512 9566b7ca83fd8f4f6f2c03d41cbb461907eb23f065b476e3d346a146e478518f14b5f3ddb622d7cd716fc3436bc395873eb047cee9bd89fc81e16aaa25ee7aab
- TLSH T1889002ABE97400192E18525125159D685953791998A851AD53414E00100D6654798453
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.