General
- Target command.ps1
- Size 42B
- Sample261002-26nakaaa32
- SHA256 69972012891004a954d5bb6ce707b398cae7589b2f2c6475fc34460bea25a7b1
- MD5 c39c70cd11fb4e89c9509099a93f817f
- SHA1 b05b26854f10a39a094e814e0e7fb7c8f8f9dec8
- SHA512 423ac1f84bf7bd9920427cde23a8f62087b2d3e75117423d368ecdd401e27466047fee730932e5fa3f9312129fcb1e7fb37db3215e0ca411b6f222df9a5da77d
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
command.ps1
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.ps1
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target command.ps1
- Size 42B
- SHA256 69972012891004a954d5bb6ce707b398cae7589b2f2c6475fc34460bea25a7b1
- MD5 c39c70cd11fb4e89c9509099a93f817f
- SHA1 b05b26854f10a39a094e814e0e7fb7c8f8f9dec8
- SHA512 423ac1f84bf7bd9920427cde23a8f62087b2d3e75117423d368ecdd401e27466047fee730932e5fa3f9312129fcb1e7fb37db3215e0ca411b6f222df9a5da77d
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.