8cad66adb36b1f4f64204a4328a063ae33695dbbd5386f761cfb56c2c0987471 | Triage™

Login
Reports

Overview

overview

5

Static

static

5

CL_Win8Helper.ps1

windows10-2004-x64

3

CL_Win8Helper.ps1

windows11-ltsc_2024-x64

3

DiagPackage.dll

windows10-2004-x64

1

DiagPackage.dll

windows11-ltsc_2024-x64

1

MF_Windows...er.ps1

windows10-2004-x64

3

MF_Windows...er.ps1

windows11-ltsc_2024-x64

3

MSIMATSFN.ps1

windows10-2004-x64

3

MSIMATSFN.ps1

windows11-ltsc_2024-x64

3

RS_Missing...he.ps1

windows10-2004-x64

3

RS_Missing...he.ps1

windows11-ltsc_2024-x64

3

RS_RapidPr...al.ps1

windows10-2004-x64

3

RS_RapidPr...al.ps1

windows11-ltsc_2024-x64

3

RS_Wow64Detect.ps1

windows10-2004-x64

3

RS_Wow64Detect.ps1

windows11-ltsc_2024-x64

3

TS_Missing...he.ps1

windows10-2004-x64

3

TS_Missing...he.ps1

windows11-ltsc_2024-x64

3

TS_RapidPr...al.ps1

windows10-2004-x64

3

TS_RapidPr...al.ps1

windows11-ltsc_2024-x64

3

TS_Wow64Detect.ps1

windows10-2004-x64

3

TS_Wow64Detect.ps1

windows11-ltsc_2024-x64

3

VF_RapidPr...al.ps1

windows10-2004-x64

3

VF_RapidPr...al.ps1

windows11-ltsc_2024-x64

3

Win8Global...or.ps1

windows10-2004-x64

3

Win8Global...or.ps1

windows11-ltsc_2024-x64

3

Win8Library.ps1

windows10-2004-x64

3

Win8Library.ps1

windows11-ltsc_2024-x64

3

Win8RC.RS.ps1

windows10-2004-x64

3

Win8RC.RS.ps1

windows11-ltsc_2024-x64

3

Win8RC.TS.ps1

windows10-2004-x64

3

Win8RC.TS.ps1

windows11-ltsc_2024-x64

3

Win8RC.VF.ps1

windows10-2004-x64

3

Win8RC.VF.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
MicrosoftProgram_Install_and_Uninstall.meta.diagcab
Size 218KB
Sample260820-pe6llswfqf
SHA256 8cad66adb36b1f4f64204a4328a063ae33695dbbd5386f761cfb56c2c0987471
MD5 7421b66d5262513da783747c831df792
SHA1 06ffc487a37374b15e81b4d272f78f2b574cc765
SHA512 15f75477e7aa6a80eb26aadfc2d9741989a1ee8f359f7b6ddd229ea3b166f17acdfd0358b92c618de82c1d8d28854d114f46b249ead412ae3da0d82c719b85d1
SSDEEP 6144:B2CHE7b1ABl947ylLipv6jAoLmLbvzSqz9f:BbE/6K762pviSLTzv
TLSH
T17024126F4B284E4A8C934CB0F67EE50B353B25DB247411F76310EC9975B4B86A732A1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution ransomware

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

CL_Win8Helper.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

CL_Win8Helper.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

DiagPackage.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

DiagPackage.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

MF_WindowsInstaller.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

MF_WindowsInstaller.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

MSIMATSFN.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

MSIMATSFN.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

RS_MissingPatchCache.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral10

Sample

RS_MissingPatchCache.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral11

Sample

RS_RapidProductRemoval.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

RS_RapidProductRemoval.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

RS_Wow64Detect.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

RS_Wow64Detect.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

TS_MissingPatchCache.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

TS_MissingPatchCache.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

TS_RapidProductRemoval.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

TS_RapidProductRemoval.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

TS_Wow64Detect.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

TS_Wow64Detect.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

VF_RapidProductRemoval.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

VF_RapidProductRemoval.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

Win8GlobalDetector.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

Win8GlobalDetector.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Win8Library.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Win8Library.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Win8RC.RS.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

Win8RC.RS.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Win8RC.TS.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

Win8RC.TS.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Win8RC.VF.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

Win8RC.VF.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  CL_Win8Helper.ps1
- Size 11KB
- SHA256 1a1505f948eb08624a4a7380ca25ef18654b5c0a15df9988209f70e958f5337b
- MD5 e7a665b03533dacfb4f3df3d8efe01c1
- SHA1 8c1aa0ea2447fb6c319a1251032b3f90f1db2fdf
- SHA512 294dd1b62bc9d6d1b01c6fbfc27864b0e45c1cdb4cfea6cc109490b9874420f66ad15afdf988af870926631952439a2faae608db3e97744b21d464fc4cc57189
- SSDEEP 192:oK5+re5p31lwtRZizkYeOcJlQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGk6:J9AtizkY2JSU7Mrw8Rme/T1bOw7gs3zG
- TLSH
  T14F4229BA1E1072C90BB3DD10D47E9615EA2D1A531DE31624B81C78E14F71F26ABDACCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  DiagPackage.dll
- Size 2KB
- SHA256 be2f0bac4a5ae87af8f6bab5875c0977792ee5ca5959a96181c146976b671fd2
- MD5 0ae02945834e3a8be734dee01ab879d9
- SHA1 39a55df41bf82bbb08a4544295faf3ced62d11ca
- SHA512 22a5568c37bfbb373702eed748218e5eaf411f2ffedbdf535316c6ca20cddb57761b0b71eb36a9e133993dd89faa9c43659419d79d9f9d328d85800e4bf7518b
- TLSH
  T159417802D3FC00AEF0BB8B3929FB07022525FC2246B7D61E0900022D3C20294EE22B75
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  MF_WindowsInstaller.ps1
- Size 11KB
- SHA256 c79377a9a222fbd6578c7c1129b4f1e751f4b556ff0b751483d2b7b7ef82b268
- MD5 266c4c475454ab9d7f6e9be97bb60964
- SHA1 76e74e4930a436ed7158078be0b9fc8c8e8e0a71
- SHA512 7fe007c7407daa72900be1a284d58f740ef4963c65649b856653040ac3fa8fc401ad2e4f2b0795656e40a895cec198c44549e07e39725692d49e9136e40aa272
- SSDEEP 192:jd0/OrwjHUIy0DvUizkYeOcJlQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGR:jyWrwoAQizkY2JSU7Mrw8Rme/T1bOw7Y
- TLSH
  T155326CFE4E1133C91F76DE10D42E6B45682D6A534ED31F18681CB8254B25F2AA7E28CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  MSIMATSFN.ps1
- Size 88KB
- SHA256 c8e366db1f77b7efa57e4b9c4db6e4ad1c82c7429d33944ad3f717d0731d7e53
- MD5 653ae832268cc19c84817d86e4a976b5
- SHA1 e278fbf01b65c6d73fd9f19a787b3cf50a5a7d3b
- SHA512 a85ad177b99f2a9835a418a965584e346b36b3a1fec0bfe565ea2670c92f69b623213fed92dc082f149942c75bdec64935dd9a448d8a74f9df8f5bb39be70801
- SSDEEP 1536:VNzJiCPnUfTxgrSBVmUerHC+SDUJJ/aA9jKx4W/pF9/9VF:VNzJsVmUergUJJ/aAxKx4Kz9lVF
- TLSH
  T11F93B4687E0141639BB3273DCFD34864FD2B046B49B61A50BADC83D06F7169943B4EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  RS_MissingPatchCache.ps1
- Size 11KB
- SHA256 e56c4a6e00d206c88399257ee93f20a9862dd52eceeb5c8a627509c274516b54
- MD5 09343a5f4abec165faef3f574d4dde03
- SHA1 1bd223b390e8f10a7859cd093ffa028b4f484ff3
- SHA512 8bd1cf13d7ce0a6e534aedca328019cd97e83e78094f92e3df4eeab76dddce85868d487e21a419bf0dc1659c9a6e7e0a38a2f8a9b0f1ceff3d64639192fec36d
- SSDEEP 192:jd0/OrwjHUlsYuD9kYGIdRQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGAw7b:jyWrwoK9kYTYU7Mrw8Rme/T1bOw7gs3k
- TLSH
  T195325BFE0F5136851B77DC10D07E575528096AA38ED31B586C2C78768A60B2A67E3CCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral10 behavioral9
- Target
  RS_RapidProductRemoval.ps1
- Size 13KB
- SHA256 90d1e1c152fa5a52c02f7b256bf00220e5e61c25748472fe9ab5b73b37337e86
- MD5 ccf5400a91c0d3c5912eecf966f468c2
- SHA1 1888420720ddb379d801892b3a1a6df7a9a551ee
- SHA512 6eaaa99b170758e5fd27812217dfe7d0a9cdf057191d73f3b8cb95c9168041d07f76af0b98a794386f960c5c03ad6d1347e462dc3188ad3b8e866ec2219ac2e8
- SSDEEP 384:jyWrwoJizkY2JSU7Mrw8Rme/T1bOw7gs3zW+L0gxqC:jyWVizP20IMUmme/T16wEF+A8qC
- TLSH
  T1D4524CFE4B1071451BB25E30D42E5795BD1A16A38FF32AA8BD5C78204F70F16A7A28C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  RS_Wow64Detect.ps1
- Size 10KB
- SHA256 1e41f88756ef5f354f3cfa8a793e34b324d30a109f65efa93af2f9830a3ad530
- MD5 4d50f1bd2c0171a9ecae29c5f81abd8e
- SHA1 c00e6f06343dbf31c907190e8fc1ab0998e4fb3d
- SHA512 72d8e47d2e7d5034f33abb9be3a7ca7683b7dce9578093d61b51ac6b870da4a45f24df1d618340997c954c0c4dbee9af5bf186dd23ae365abf52dad86182941b
- SSDEEP 192:jd0/OrwjHUymNHgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGLww+JIOK:jyWrwo/NAkYyU7Mrw8Rme/T1bOw7gs3O
- TLSH
  T1B6326CFE4F6037C81B77DD10D0AE6B05581AAD624ED32F585C2C78258A21B2A57E3CDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  TS_MissingPatchCache.ps1
- Size 11KB
- SHA256 7fdefec9551db1f40a54d397c441bc4e5505eb8401aae148e90437ece414b296
- MD5 1c3130b9ab767b08ea09fc1cc97de844
- SHA1 5ca449dcae2d457b4d1b0f2f317c03c753ef264a
- SHA512 df7b89d330ba0e21b57032fd646ba14eef81f0afb2f1bcfbbbd4cd0990e2081495017fdcf2b89e63bb35bfb9a78e6ac52436537b0b7d6bca775722dede362cce
- SSDEEP 192:jd0/OrwjHUDr5THgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGAwThhj5:jyWrwodAkYyU7Mrw8Rme/T1bOw7gs3za
- TLSH
  T11F326EBE0F2073C51B77CD60C06E5B55580AA9634ED32B98BC2C74258B25B2697E7CC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  TS_RapidProductRemoval.ps1
- Size 17KB
- SHA256 540544802506667b3af961d01a153117229273c1513b157fa2e53390ab298ec5
- MD5 b992b782ea363cce60a811d959c00f4f
- SHA1 38326e5bd52a413777c5bfd917b81e91b73dc3d5
- SHA512 0fd6c8fdd1c32439a6a416ee855e7bcd72927860d1bcb17c56730986b79e1b83f43ea2f5f321a92f7111afbfc67598405bc47b0b44c56044e27bf778ab90bce4
- SSDEEP 384:jyWrwowLKL5F0MAXWnc6FXLoUtAkYyU7Mrw8Rme/T1bOw7gs3zWCL4kXf:jyW0LKLMOXAPyIMUmme/T16wEFCHf
- TLSH
  T169821AEDAA51645417B71931C07B0ACFFC194193CF9B2B64B49CAC116F26E198392FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  TS_Wow64Detect.ps1
- Size 10KB
- SHA256 3cf9d09cfed81ced96b3e74638ae908b9df2cd6da5ed94be859fc523f8f0c57f
- MD5 752fc0f7f2e8f51c3dd7eb4ec326851e
- SHA1 ae601e9c3be79ef83c9acd8e3f475993aae7ea52
- SHA512 65f1b5a8280e3f46deae300240dcb2addac8479fb846185b13f5b15abcfb7b5a243e910218a7d1f1cfbed0d6d7d21be3a73f480f9686f7e2a98dd9229d777d11
- SSDEEP 192:jd0/OrwjHUX0DOEZizkYeOcJlQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjG6:jyWrwoX0zizkY2JSU7Mrw8Rme/T1bOwT
- TLSH
  T1E5326EFE0F1036C91F779D10D06EA705681DAE624EE32B58582CB8258734F2667E78C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  VF_RapidProductRemoval.ps1
- Size 11KB
- SHA256 f993319dc562e42b54d3081d8d6107b052a0630777cf0f650380345c293c44fa
- MD5 0584e18ffd7fa1a59b7e27e35ade1231
- SHA1 1dbc15e8772233ae8bb31ef08d4237fbd88e88d8
- SHA512 a98530572a21d0322bff722385536e382e59af89b90a8747bc081e21dc74e127294998f5af3f0e9d0cc563d1d701f35c152e132fa6d065e4eba5d727a041c9ad
- SSDEEP 192:jd0/OrwjHUEu5YuD9kYGIdRQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGBwx:jyWrwoJ9kYTYU7Mrw8Rme/T1bOw7gs3B
- TLSH
  T124327EFE0E5136C91773DD20C03E674978195A628ED32B58AC2C78358A20F26A7D7CC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Win8GlobalDetector.ps1
- Size 9KB
- SHA256 4114c01eeb71d9d7e7d9466e26ee5f22099c3ebf251ad6c74cdc1fe8fbe7beb6
- MD5 b91c765f07e2857eb91024c92e10f873
- SHA1 941f470df82b05c6656cc44ad24303c4920702c0
- SHA512 29a39ef8f5b2379f1abca6eaefc17b126d7dbb0e2de0a5943f773127e0340df89b2b22c4ee0e91c2600bff8aca4b6749370cb768d1683ef5fad3ba6925162ae6
- SSDEEP 192:3MHgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGUwYJ8/w:cAkYyU7Mrw8Rme/T1bOw7gs3znvJ8/w
- TLSH
  T17F226DBE0E2077C91977CC20D0BE661A6C189E534ED12798AC587C358F21B66A7D7CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Win8Library.ps1
- Size 10KB
- SHA256 fc240d49f3d6c2e6ca087c3ca17d5de347239ffdf0a256587c74ce1d294bc531
- MD5 779a985254fca2e22516c491c27a1967
- SHA1 ce8e1b8386fa90517e8c7da2332d83e76a44814e
- SHA512 7a694f29a2f86def8eadd90491e5022f14c94a8985bb46a8448c6f2b3a4e7c8f9529edc2848b1c946fae88f876ed13347f5cb797ec1cd6556277004c98c9e023
- SSDEEP 192:qYA3vhHgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGtwTFwDB3z:qrZAkYyU7Mrw8Rme/T1bOw7gs3zueiV
- TLSH
  T1E8225CBE0D2076881A37DD20E16E5E1998196E934FD02668BC1CBC658F30B6797D3DCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Win8RC.RS.ps1
- Size 10KB
- SHA256 873cdef0cf7dcd6aa8111fc43e18c9389b57c4a7d84234babfc6453410e89a23
- MD5 3054b831be9592ac9d0e143e1c513ed7
- SHA1 6b0df28d486b93c6cebddd2229dec064d79929d7
- SHA512 b30cd9d2ee974abe5bb55f9919af7772c988353ca32fc3580e464d8a3b41c66ae31181907c59364f2bb930958fe76989f081880a69433c6ee063042f75109ed3
- SSDEEP 192:85JlHgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGLwoNYnlp:IAkYyU7Mrw8Rme/T1bOw7gs3zsjNYlp
- TLSH
  T117227EBF0E2035C915B7CC14D4AE5712981E99934ED227E8BC5C78284F31B52ABD2CCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Win8RC.TS.ps1
- Size 10KB
- SHA256 175733a2fddefbfa0afa4749ccde1e959e212bb45ff4d31b736fe1aa962cae70
- MD5 a14f7f9e86dbc28f71217b6198886939
- SHA1 4b713384465aec3adb2aee528bdac667c33fe4d2
- SHA512 779bd5277abe412d17201864d2e174a204ad1889f2140a3085d9d0727a4727b2881ed4546c43086c0a7d130a105a52d1312dc7608eebe8dbc99905c371fa05e8
- SSDEEP 192:DETyaHgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGLwZ1yNcD2:idAkYyU7Mrw8Rme/T1bOw7gs3zsa1Xq
- TLSH
  T1A2225DBF0E1076C91A77CC10D07EA6156819A9534ED12B9C99687C358B22F26A7D3CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Win8RC.VF.ps1
- Size 10KB
- SHA256 6530692142bfbb012fb30f66cec8868fddb66d7431db55680de6f2c1f262dcca
- MD5 378e5f0a90ab090db58fbe19994db9f2
- SHA1 db95bfbc0621867b38d5b16f17b7ca5e1de8ba5e
- SHA512 e5c0b665fc5a7fc97d2522ecdb25330bcddaf859c695d3dafaff516770fc317898886c2e0fc96e38ecd1ee439f96441d615399a57610ecddb0820a581e4c4967
- SSDEEP 192:bsHgkYFQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGLwPWlmIwMu:QAkYyU7Mrw8Rme/T1bOw7gs3zsAWlmOu
- TLSH
  T10C226DBF0E2076C91AB7CC10C06D661A1C1DAA534DD12798A91CBC34CB35B25A7E3CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

executionransomware

behavioral10

executionransomware

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy