General
- Target code.ps1
- Size 228B
- Sample260720-lt379agt5z
- SHA256 e73770eb29d5a846c1de65ed0f372673054542cd34fea0a052b0baf8838408b4
- MD5 13abad5cd5f73adb2869525dcd6de82f
- SHA1 95f228ee2aa98239bc541460e1452ac8b0015c2d
- SHA512 f1bc4da97ad6a8d23c4d03daf01337d9150a424c1fe1fef12392627bf322d4c377acdb62b70d83dcf47b0fc18920154f971e1228ef85b18561887e4bdff1c3ec
- TLSH T14CD0A7A627192A23838B09717730E779D899D501E76158B63721EC23FE9008E753A865
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
code.ps1
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
code.ps1
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target code.ps1
- Size 228B
- SHA256 e73770eb29d5a846c1de65ed0f372673054542cd34fea0a052b0baf8838408b4
- MD5 13abad5cd5f73adb2869525dcd6de82f
- SHA1 95f228ee2aa98239bc541460e1452ac8b0015c2d
- SHA512 f1bc4da97ad6a8d23c4d03daf01337d9150a424c1fe1fef12392627bf322d4c377acdb62b70d83dcf47b0fc18920154f971e1228ef85b18561887e4bdff1c3ec
- TLSH T14CD0A7A627192A23838B09717730E779D899D501E76158B63721EC23FE9008E753A865
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.