General
- Target code.ps1
- Size 67B
- Sample260707-zpg14set9w
- SHA256 dec216da965e69440dbab6c72f3d3f2a607ad264d1782c7d2a61890c3e5ef85f
- MD5 0c7e21db5f30e389803dc8234f8b9e8d
- SHA1 c1b3b09b0bbf8d9edba5a035d2925b3d3088ef59
- SHA512 de43d69b0a2584081f06fb24745414ef9537c117ca14dc5c94f274b2f9042943fac1265f279c0afabf258f34a201c6f6aec7c14648fdfd5b0ae179932e395484
- TLSH T11BA002250D6A655FCF9BDA2CA04611411A07540282480383BA915828AE544D6D53DD75
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
code.ps1
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
code.ps1
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target code.ps1
- Size 67B
- SHA256 dec216da965e69440dbab6c72f3d3f2a607ad264d1782c7d2a61890c3e5ef85f
- MD5 0c7e21db5f30e389803dc8234f8b9e8d
- SHA1 c1b3b09b0bbf8d9edba5a035d2925b3d3088ef59
- SHA512 de43d69b0a2584081f06fb24745414ef9537c117ca14dc5c94f274b2f9042943fac1265f279c0afabf258f34a201c6f6aec7c14648fdfd5b0ae179932e395484
- TLSH T11BA002250D6A655FCF9BDA2CA04611411A07540282480383BA915828AE544D6D53DD75
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.