e75ff18ee5c7226e225aa9959df439f1488df8cd3d43f5471361ed0426700832

Login
Reports

Overview

overview

Static

static

Documents 5.zip

windows10-2004-x64

Documents 5.zip

windows11-ltsc_2024-x64

DOS - Wind...gs.zip

windows10-2004-x64

DOS - Wind...gs.zip

windows11-ltsc_2024-x64

Dos - Wind...ll.zip

windows10-2004-x64

Dos - Wind...ll.zip

windows11-ltsc_2024-x64

WindowsPow...ts.ps1

windows10-2004-x64

WindowsPow...ts.ps1

windows11-ltsc_2024-x64

WindowsPow...ts.ps1

windows10-2004-x64

WindowsPow...ts.ps1

windows11-ltsc_2024-x64

WindowsPow...ps1xml

windows10-2004-x64

WindowsPow...ps1xml

windows11-ltsc_2024-x64

WindowsPow...on.ps1

windows10-2004-x64

WindowsPow...on.ps1

windows11-ltsc_2024-x64

WindowsPow...l..ps1

windows10-2004-x64

WindowsPow...l..ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...nt.ps1

windows10-2004-x64

WindowsPow...nt.ps1

windows11-ltsc_2024-x64

WindowsPow...at.xml

windows10-2004-x64

WindowsPow...at.xml

windows11-ltsc_2024-x64

WindowsPow...t.psd1

windows10-2004-x64

WindowsPow...t.psd1

windows11-ltsc_2024-x64

WindowsPow...ICENSE

windows10-2004-x64

WindowsPow...ICENSE

windows11-ltsc_2024-x64

Analysis

max time kernel
599s
max time network
476s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

Documents 5.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

Documents 5.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

DOS - Windows Logs Admin Events and Pics of things.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

DOS - Windows Logs Admin Events and Pics of things.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral5

Sample

Dos - WindowsPowerShell.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

Dos - WindowsPowerShell.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Comprehensive/Comprehensive.Tests.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral8

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Comprehensive/Comprehensive.Tests.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral9

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Simple/Simple.Tests.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral10

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Simple/Simple.Tests.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral11

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Opera.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

600 seconds

execution ransomware

Behavioral task

behavioral12

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Opera.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

17 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral13

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Operation.Validation.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral14

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Operation.Validation.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral15

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Microsoft.PowerShell..ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral16

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Microsoft.PowerShell..ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral17

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example1.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral18

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example1.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral19

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example2.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral20

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example2.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral21

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral22

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral23

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral24

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral25

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/DSCResources/MSFT_PackageManagement/MSFT_PackageManagement.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral26

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/DSCResources/MSFT_PackageManagement/MSFT_PackageManagement.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral27

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.format.xml

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral28

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.format.xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral29

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.psd1

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

600 seconds

ransomware

Behavioral task

behavioral30

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.psd1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

600 seconds

ransomware

Behavioral task

behavioral31

Sample

WindowsPowerShell/Modules/Pester/3.4.0/LICENSE

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral32

Sample

WindowsPowerShell/Modules/Pester/3.4.0/LICENSE

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
Dos - WindowsPowerShell.zip
Size 637KB
Sample260930-alaeesserb
SHA256 e75ff18ee5c7226e225aa9959df439f1488df8cd3d43f5471361ed0426700832
MD5 07d37fc575e373f878ae3c7cca2bfc25
SHA1 a2fc89aba12f8739184d44d0fffbe6323d9654eb
SHA512 36dc7349d052cd474818a6ae3149eda469d829cf2e4d9a0e55252468cdf9e9704d5293b8b4f73b4a25b07f8c8dd8eeab2ed18bbb1ff7d76958b51eb555562339
SSDEEP 12288:p+tdEY/BtfYSn+LaTe6I+VrYtsyPZn7Dc7vsZEZ7zDVzSEpSH8TRNdgS35ZOnx:Mtdp/bAc+kzIrt1nnc7vsInhIH8TPdgt
TLSH
T188D4F134A3380753CD5BFF3F540A4A61C8ED932580C99BA73A4C99E99C53663668B1CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Dos - WindowsPowerShell.zip"
1⤵
PID:3112

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads