General
- Target SAB.ps1
- Size 1KB
- Sample260930-rl2x4shd24
- SHA256 dde285d2f1a62e3310b7c4fe4d95d7b1dbbd674ebb9153fe8bbeba47ecb5846b
- MD5 79f00b4695636ebe2a7d0808c100e1c3
- SHA1 4c5eedc1661ea40abf2543d95d865155cc4863bc
- SHA512 b5425c5ca3a0254c7405e61f8a6a89f2911e75eae9913d0793a4e54aae1fd852767c7b5fb5b740bd8d173d7ff9cbc63e5d70e864d03400e8e2de225271b094ff
- TLSH T1D3215162B45200E891B2077930E8DA603E1BC45FA6EB0608BDCEB3860F11F7C8FB0760
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SAB.ps1
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
SAB.ps1
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target SAB.ps1
- Size 1KB
- SHA256 dde285d2f1a62e3310b7c4fe4d95d7b1dbbd674ebb9153fe8bbeba47ecb5846b
- MD5 79f00b4695636ebe2a7d0808c100e1c3
- SHA1 4c5eedc1661ea40abf2543d95d865155cc4863bc
- SHA512 b5425c5ca3a0254c7405e61f8a6a89f2911e75eae9913d0793a4e54aae1fd852767c7b5fb5b740bd8d173d7ff9cbc63e5d70e864d03400e8e2de225271b094ff
- TLSH T1D3215162B45200E891B2077930E8DA603E1BC45FA6EB0608BDCEB3860F11F7C8FB0760
- MD5 SHA1 SHA512 TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.