a31f8b1db900695d0f185effe0b87942e1d07977959e9faff5d05d5c5d720717

Login
Reports

Overview

overview

Static

static

Documents 5.zip

windows10-2004-x64

Documents 5.zip

windows11-ltsc_2024-x64

DOS - Wind...gs.zip

windows10-2004-x64

DOS - Wind...gs.zip

windows11-ltsc_2024-x64

Dos - Wind...ll.zip

windows10-2004-x64

Dos - Wind...ll.zip

windows11-ltsc_2024-x64

WindowsPow...ts.ps1

windows10-2004-x64

WindowsPow...ts.ps1

windows11-ltsc_2024-x64

WindowsPow...ts.ps1

windows10-2004-x64

WindowsPow...ts.ps1

windows11-ltsc_2024-x64

WindowsPow...ps1xml

windows10-2004-x64

WindowsPow...ps1xml

windows11-ltsc_2024-x64

WindowsPow...on.ps1

windows10-2004-x64

WindowsPow...on.ps1

windows11-ltsc_2024-x64

WindowsPow...l..ps1

windows10-2004-x64

WindowsPow...l..ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...nt.ps1

windows10-2004-x64

WindowsPow...nt.ps1

windows11-ltsc_2024-x64

WindowsPow...at.xml

windows10-2004-x64

WindowsPow...at.xml

windows11-ltsc_2024-x64

WindowsPow...t.psd1

windows10-2004-x64

WindowsPow...t.psd1

windows11-ltsc_2024-x64

WindowsPow...ICENSE

windows10-2004-x64

WindowsPow...ICENSE

windows11-ltsc_2024-x64

Analysis

max time kernel
598s
max time network
472s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

Documents 5.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

Documents 5.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

DOS - Windows Logs Admin Events and Pics of things.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

DOS - Windows Logs Admin Events and Pics of things.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral5

Sample

Dos - WindowsPowerShell.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

Dos - WindowsPowerShell.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Comprehensive/Comprehensive.Tests.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral8

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Comprehensive/Comprehensive.Tests.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral9

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Simple/Simple.Tests.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral10

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Simple/Simple.Tests.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral11

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Opera.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

600 seconds

execution ransomware

Behavioral task

behavioral12

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Opera.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

17 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral13

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Operation.Validation.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral14

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Operation.Validation.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral15

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Microsoft.PowerShell..ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral16

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Microsoft.PowerShell..ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral17

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example1.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral18

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example1.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral19

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example2.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral20

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example2.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral21

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral22

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral23

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral24

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral25

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/DSCResources/MSFT_PackageManagement/MSFT_PackageManagement.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral26

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/DSCResources/MSFT_PackageManagement/MSFT_PackageManagement.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral27

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.format.xml

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral28

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.format.xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral29

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.psd1

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

600 seconds

ransomware

Behavioral task

behavioral30

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.psd1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

600 seconds

ransomware

Behavioral task

behavioral31

Sample

WindowsPowerShell/Modules/Pester/3.4.0/LICENSE

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral32

Sample

WindowsPowerShell/Modules/Pester/3.4.0/LICENSE

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
DOS - Windows Logs Admin Events and Pics of things.zip
Size 743KB
Sample260930-alaeesserb
SHA256 a31f8b1db900695d0f185effe0b87942e1d07977959e9faff5d05d5c5d720717
MD5 ae24d24bd83e67c8906d3ad05622fe4e
SHA1 f0bb2f92f6105b92c4b6770d22c1bb9d2624cf1f
SHA512 db45e28c2a5fb3e5be4d11eb3455c22909a3446e16e87815a4f49fbb8f1c14402ef49bc61f0d8e1200f4acf02a8f6330cb2997fbcd9a1aeca5629b53e572b1b9
SSDEEP 12288:c9NQb7BFnHIa1Nrs2DLDINAzoDl9Bc9Fx2HR5A9fA9kSkJEHcJ+OS6:bnHIavDfINAzs7+Txg3AxAivJEu+OS6
TLSH
T1EEF4231BF5B904A8B079455E5173AEEC93FD8CAF9F4A30724E0C9092294391E57EE7B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\DOS - Windows Logs Admin Events and Pics of things.zip"
1⤵
PID:4340

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads