General
- Target install.ps1
- Size 7KB
- Sample260703-wtk2sadx6x
- SHA256 34d5e0594aaebd6685015e6bb6e1b7f8f5ca71d53e9bb089c27c01492eaa6d72
- MD5 60e7caa585dcd74d827fa4fca20a2b81
- SHA1 549dc5ed6c263b8d62f8f681a84ff56d38023a17
- SHA512 cd24ff1b3aeab7aee99ab1da6f20ed70f3397cb8f13933f9fee54d74e119e606ba176a24b6583d2fe110d938a5c0665e7587c23d2caac0212d6b6aa8c3515a35
- SSDEEP 192:CMN09WgbmzszF1XubmLwLTLparEBHVyzrTvNi/zoMlM0hv:B2WXTHx7f5
- TLSH T1D1E1A52E7FD249230B93222C5CDEA6007326422759685D08F49C4394EF65A2DE7FFAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
install.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.ps1
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target install.ps1
- Size 7KB
- SHA256 34d5e0594aaebd6685015e6bb6e1b7f8f5ca71d53e9bb089c27c01492eaa6d72
- MD5 60e7caa585dcd74d827fa4fca20a2b81
- SHA1 549dc5ed6c263b8d62f8f681a84ff56d38023a17
- SHA512 cd24ff1b3aeab7aee99ab1da6f20ed70f3397cb8f13933f9fee54d74e119e606ba176a24b6583d2fe110d938a5c0665e7587c23d2caac0212d6b6aa8c3515a35
- SSDEEP 192:CMN09WgbmzszF1XubmLwLTLparEBHVyzrTvNi/zoMlM0hv:B2WXTHx7f5
- TLSH T1D1E1A52E7FD249230B93222C5CDEA6007326422759685D08F49C4394EF65A2DE7FFAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.