General
- Target Project_anomalies_loader.ps1
- Size 456KB
- Sample260825-p68kaasena
- SHA256 684d361d11dcdc177f6155498757c6f1701942ec31683a7cbb04576f12254228
- MD5 ec9cec29ef4bf632ab9ae7aed0958d43
- SHA1 ebdca62ec5a2d7f9aacd64d8921eac74ff9e5710
- SHA512 d7daeac49131a4bcb614c3f8b74c7aec73e8d6729f7f30b0a4a8ab86f0e8b49aee44933c4498098d309338d664c1df4044792744fb378b92ef4d13c95d88bcb8
- SSDEEP 12288:PGwEr4+Krccgiy9UbyzaTIZHynvo2w68/P4iF1a4t90sNFiOxVW2Fz+y3IC+nQ72:d
- TLSH T163A46D26EBF45EC88A88673BD338088D23B99719C7C675DD954B750B49CFE78CA4C04A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
Project_anomalies_loader.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Project_anomalies_loader.ps1
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Project_anomalies_loader.ps1
- Size 456KB
- SHA256 684d361d11dcdc177f6155498757c6f1701942ec31683a7cbb04576f12254228
- MD5 ec9cec29ef4bf632ab9ae7aed0958d43
- SHA1 ebdca62ec5a2d7f9aacd64d8921eac74ff9e5710
- SHA512 d7daeac49131a4bcb614c3f8b74c7aec73e8d6729f7f30b0a4a8ab86f0e8b49aee44933c4498098d309338d664c1df4044792744fb378b92ef4d13c95d88bcb8
- SSDEEP 12288:PGwEr4+Krccgiy9UbyzaTIZHynvo2w68/P4iF1a4t90sNFiOxVW2Fz+y3IC+nQ72:d
- TLSH T163A46D26EBF45EC88A88673BD338088D23B99719C7C675DD954B750B49CFE78CA4C04A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (152) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.