General
- Target command.ps1
- Size 42B
- Sample261002-2b6tesvajg
- SHA256 1ece2427be82267b5e7254b5229c81b378b85f1b6e905bf6f1e31856fa2aa7d4
- MD5 b816eba15d472307c9b4ffc5ce1ca12a
- SHA1 a5cacf7f9d3e9c7218af7c5276c270bc6226e310
- SHA512 a65e8ea3479a78c3f38d7ea06d369732c8893e965f54f509ef39ff41c6b6cd7ac877d840e2e00afc7fccb48f97187584c15c86e8afcc21d6a875197adb0a6908
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
command.ps1
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.ps1
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target command.ps1
- Size 42B
- SHA256 1ece2427be82267b5e7254b5229c81b378b85f1b6e905bf6f1e31856fa2aa7d4
- MD5 b816eba15d472307c9b4ffc5ce1ca12a
- SHA1 a5cacf7f9d3e9c7218af7c5276c270bc6226e310
- SHA512 a65e8ea3479a78c3f38d7ea06d369732c8893e965f54f509ef39ff41c6b6cd7ac877d840e2e00afc7fccb48f97187584c15c86e8afcc21d6a875197adb0a6908
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.