General
- Target protected
- Size 1KB
- Sample260709-pgnhtabs6v
- SHA256 0082f06b387962f9e47c84929bcdb5b9a1e2a46a578b89c63e09a83935ca9b00
- MD5 2f962d89e7fc9ab98fc6b7f60e61eec3
- SHA1 9d3d91fbae7355b142119f1423f944409f56698c
- SHA512 f61a25e2fd7c5f92426475ebf556298349d48c6a5c7dbd53004624e64439c5eb71f6a64d11536f40ca225d170586d2439d1becf68edd226ad3196d855f361394
- TLSH T1AD315323F2D2D410520FC5A7E8667211FEC54D9085E903AC819C8ABCBEC75A8726932B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
protected.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
protected.ps1
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target protected
- Size 1KB
- SHA256 0082f06b387962f9e47c84929bcdb5b9a1e2a46a578b89c63e09a83935ca9b00
- MD5 2f962d89e7fc9ab98fc6b7f60e61eec3
- SHA1 9d3d91fbae7355b142119f1423f944409f56698c
- SHA512 f61a25e2fd7c5f92426475ebf556298349d48c6a5c7dbd53004624e64439c5eb71f6a64d11536f40ca225d170586d2439d1becf68edd226ad3196d855f361394
- TLSH T1AD315323F2D2D410520FC5A7E8667211FEC54D9085E903AC819C8ABCBEC75A8726932B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.