General
- Target command.ps1
- Size 42B
- Sample260929-ratscs1grb
- SHA256 6c2e214b35864ff603ff430cc44afa58052b0f65d34d4c3f040d107084197249
- MD5 0c1ecc883f16aca864bf3f9afb509046
- SHA1 ab2ad3f12f94cae00c88084693f746a17532cd9a
- SHA512 fb80f99b831351594b26d7f28ae2177942cd42bc8c668bc0a6826c54714673a0c044bd5bdfd5ef58aa1c4a84f8ca1fefdfc754693129e112a11e0e80d562dbe2
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
command.ps1
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.ps1
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target command.ps1
- Size 42B
- SHA256 6c2e214b35864ff603ff430cc44afa58052b0f65d34d4c3f040d107084197249
- MD5 0c1ecc883f16aca864bf3f9afb509046
- SHA1 ab2ad3f12f94cae00c88084693f746a17532cd9a
- SHA512 fb80f99b831351594b26d7f28ae2177942cd42bc8c668bc0a6826c54714673a0c044bd5bdfd5ef58aa1c4a84f8ca1fefdfc754693129e112a11e0e80d562dbe2
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.