General
- Target Project_anomalies.ps1
- Size 340KB
- Sample260825-pse1taywgx
- SHA256 0812523b58e67ac3c5dc0f849910286fe566986652454c619c963acdbe35c15a
- MD5 d8ccc5b954b76da7ac3448d830c2c4de
- SHA1 ad3ba88b0960ce39bf1255aa149edca6c699f680
- SHA512 80ce78be8d9cc31a8154e2416aa628e9dfd87b51320fef28d26293e854631c3a7d492757acb7580a347b7ac83d355892e2636227c5a8b20fd67d0ad4825ec248
- SSDEEP 1536:dexgzuUSauI90CFF3RFFaNolAU4Lsq5666W6RyOtUn4vhWMYvFkMprlBQmMJt1Sz:UGzuPBDp5666W6pt72Oowt4T/cdW
- TLSH T17274F9371607728168092F73F66E5CCA8C15D583DE51EEF8F7BA2928A27D24C4ED129C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
Project_anomalies.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Project_anomalies.ps1
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Project_anomalies.ps1
- Size 340KB
- SHA256 0812523b58e67ac3c5dc0f849910286fe566986652454c619c963acdbe35c15a
- MD5 d8ccc5b954b76da7ac3448d830c2c4de
- SHA1 ad3ba88b0960ce39bf1255aa149edca6c699f680
- SHA512 80ce78be8d9cc31a8154e2416aa628e9dfd87b51320fef28d26293e854631c3a7d492757acb7580a347b7ac83d355892e2636227c5a8b20fd67d0ad4825ec248
- SSDEEP 1536:dexgzuUSauI90CFF3RFFaNolAU4Lsq5666W6RyOtUn4vhWMYvFkMprlBQmMJt1Sz:UGzuPBDp5666W6pt72Oowt4T/cdW
- TLSH T17274F9371607728168092F73F66E5CCA8C15D583DE51EEF8F7BA2928A27D24C4ED129C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (259) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.