General
- Target update
- Size 1KB
- Sample260928-pma5nstdmb
- SHA256 d2a61974ff1bb720f48b0694213f2df964bbb0399a9855fbcb9d6dedbdd8a35a
- MD5 b2ef1ef8fb0c6be92a12d282b4ad1df4
- SHA1 c0a7e3cde75ea8c8d062baded597033e2543d9d5
- SHA512 7c6e4cf632c9418b6b9d96af1dac35fa04aa2c00cf3fd41d34f1289f2d23d5de62481b1c090cb2a1c900d6c7ad5d364ce23034ea45ca9c6a0efd88395c7bfc8e
- TLSH T11F31B615A3ACC3D1C0C45391EDDFD7A5437E006E88051281974CE603BCE316E473E6C1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
update.ps1
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
update.ps1
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://cloud-sharing.com/service.png
Targets
-
- Target update
- Size 1KB
- SHA256 d2a61974ff1bb720f48b0694213f2df964bbb0399a9855fbcb9d6dedbdd8a35a
- MD5 b2ef1ef8fb0c6be92a12d282b4ad1df4
- SHA1 c0a7e3cde75ea8c8d062baded597033e2543d9d5
- SHA512 7c6e4cf632c9418b6b9d96af1dac35fa04aa2c00cf3fd41d34f1289f2d23d5de62481b1c090cb2a1c900d6c7ad5d364ce23034ea45ca9c6a0efd88395c7bfc8e
- TLSH T11F31B615A3ACC3D1C0C45391EDDFD7A5437E006E88051281974CE603BCE316E473E6C1
- MD5 SHA1 SHA512 TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.