General
- Target test.ps1
- Size 15B
- Sample260727-122fyssckd
- SHA256 0a5e7e18b8101692fb219ef07f20019f397cb2179aa869770c8cec58ca20bb75
- MD5 e399f43333f59f7e54d153fb746d95e4
- SHA1 18f1500d673ab1fa72404f92a1cf57d0d7346911
- SHA512 3dd2ddda69c506eb8d4965aa03ad36a8bac093595bde8a02d9fea791e0e1c26d592f08ec33b0a7fd3220302a46c2ab5b58634d8df361c7d525454386e7b3dd88
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
test.ps1
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
test.ps1
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target test.ps1
- Size 15B
- SHA256 0a5e7e18b8101692fb219ef07f20019f397cb2179aa869770c8cec58ca20bb75
- MD5 e399f43333f59f7e54d153fb746d95e4
- SHA1 18f1500d673ab1fa72404f92a1cf57d0d7346911
- SHA512 3dd2ddda69c506eb8d4965aa03ad36a8bac093595bde8a02d9fea791e0e1c26d592f08ec33b0a7fd3220302a46c2ab5b58634d8df361c7d525454386e7b3dd88
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.