General
- Target worm.ps1
- Size 1KB
- Sample260912-pl98dazsax
- SHA256 6f431dde11c723beb8970535142a89902c66c52b5666c050d3418a325a2f4ae9
- MD5 851547e7d18e254854a2e373b22d89b2
- SHA1 4db208844555057b3ce33427b91015685f409d38
- SHA512 89f2941d835e5aa2546c4c06bffcecca049b5505057367e243a245ee376e721b8e038446c7cc261c113e62759a64c806ff7e477c5a82bb4498b906fcacbd5e59
- TLSH T18D410AA57372D9F849B1341AD435E76693303203F68CED21F045863BD30831B6D66158
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
worm.ps1
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
worm.ps1
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target worm.ps1
- Size 1KB
- SHA256 6f431dde11c723beb8970535142a89902c66c52b5666c050d3418a325a2f4ae9
- MD5 851547e7d18e254854a2e373b22d89b2
- SHA1 4db208844555057b3ce33427b91015685f409d38
- SHA512 89f2941d835e5aa2546c4c06bffcecca049b5505057367e243a245ee376e721b8e038446c7cc261c113e62759a64c806ff7e477c5a82bb4498b906fcacbd5e59
- TLSH T18D410AA57372D9F849B1341AD435E76693303203F68CED21F045863BD30831B6D66158
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.