General
- Target sample.ps1
- Size 1KB
- Sample260707-q22rlsbs3z
- SHA256 8a372420b067910a4a64aa84a395f0c898452380526dc5048d44239b89acdbb6
- MD5 0d5dc203c90216292a85c2faec8b24f2
- SHA1 ca1409e7cb16b5357ddba6eab7b341b104ec5407
- SHA512 61029af28b0f812266d128d649380b1d6c93e6a93a8be57dfe5784a67b572dc7d104f77992f9e5280dab9c95598469edf5890e164d084cb51b48d38ab2721a5b
- TLSH T1AB219FC30BF9299EAD618168D481371B2CB3C0632C0D4A6C7A63438FAA3F35E526D644
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.ps1
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.ps1
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target sample.ps1
- Size 1KB
- SHA256 8a372420b067910a4a64aa84a395f0c898452380526dc5048d44239b89acdbb6
- MD5 0d5dc203c90216292a85c2faec8b24f2
- SHA1 ca1409e7cb16b5357ddba6eab7b341b104ec5407
- SHA512 61029af28b0f812266d128d649380b1d6c93e6a93a8be57dfe5784a67b572dc7d104f77992f9e5280dab9c95598469edf5890e164d084cb51b48d38ab2721a5b
- TLSH T1AB219FC30BF9299EAD618168D481371B2CB3C0632C0D4A6C7A63438FAA3F35E526D644
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.