General
- Target install.sh
- Size 114KB
- Sample260810-x36khsfq71
- SHA256 0034898bce1ff687b25812e9807d89d34080d5569bbdacfae8816d115ccb9b89
- MD5 8174e91b73e09690c80c7fc4e7bd849f
- SHA1 a818a1d9ff8c41bc9525b7e2cc708f464d194cbf
- SHA512 2f72b0f183282d092877dc4f216675af039a7811b9707a9a7461c56661e92e0d35d22cd2e8cbbd78ff5a71ce3fafb21d3f5917fd0bd9129b867e9bf1c60715be
- SSDEEP 1536:i5R7E3NJgYkQTC5ioMJLupmAb7VjaoIKSDFu6VnchAdVYf535qDmx5YWY31yzgXA:MRIduQCyJLup11C9AT7YEeA
- TLSH T1A0B39556ADD29AF1348842ACADC7585173081017099C3861FD7EBA583F7636CB2F63AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
install.sh
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target install.sh
- Size 114KB
- SHA256 0034898bce1ff687b25812e9807d89d34080d5569bbdacfae8816d115ccb9b89
- MD5 8174e91b73e09690c80c7fc4e7bd849f
- SHA1 a818a1d9ff8c41bc9525b7e2cc708f464d194cbf
- SHA512 2f72b0f183282d092877dc4f216675af039a7811b9707a9a7461c56661e92e0d35d22cd2e8cbbd78ff5a71ce3fafb21d3f5917fd0bd9129b867e9bf1c60715be
- SSDEEP 1536:i5R7E3NJgYkQTC5ioMJLupmAb7VjaoIKSDFu6VnchAdVYf535qDmx5YWY31yzgXA:MRIduQCyJLup11C9AT7YEeA
- TLSH T1A0B39556ADD29AF1348842ACADC7585173081017099C3861FD7EBA583F7636CB2F63AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.