General
- Target cluste
- Size 1KB
- Sample260701-g4mk2afy7r
- SHA256 29e2bc2b8baec72f106553eeb299ef2131069ea6f69b0a7db523e590f2da5f39
- MD5 f91a6f1d37a6a9c624afbc33a7411999
- SHA1 33c72ce341b874568c33f32aabced110e4a5be07
- SHA512 799f300b0458c9d949ba540a1c9cb68dcfe7538d81ac070fb695f0f01bda2cdb861f8b7a0139c130fce2d79b019400588be306f512983a3ed4a690987e08a334
- TLSH T1C1316523F192D511624FD5A3EC667114FED94CA485E903ACC19CCABCFBC749C626923A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
cluste.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
cluste.ps1
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target cluste
- Size 1KB
- SHA256 29e2bc2b8baec72f106553eeb299ef2131069ea6f69b0a7db523e590f2da5f39
- MD5 f91a6f1d37a6a9c624afbc33a7411999
- SHA1 33c72ce341b874568c33f32aabced110e4a5be07
- SHA512 799f300b0458c9d949ba540a1c9cb68dcfe7538d81ac070fb695f0f01bda2cdb861f8b7a0139c130fce2d79b019400588be306f512983a3ed4a690987e08a334
- TLSH T1C1316523F192D511624FD5A3EC667114FED94CA485E903ACC19CCABCFBC749C626923A
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.