General
- Target 020fef3208a181a1a5fcd03cf701df06d30b6f9595879d76c0c0f5b6c66c21cb
- Size 28KB
- Sample261002-kz15ea1fkc
- SHA256 020fef3208a181a1a5fcd03cf701df06d30b6f9595879d76c0c0f5b6c66c21cb
- MD5 73d3a8a2433f1e6631f331ca1109687a
- SHA1 4fb70fe0eaed15538d3a60e4edd896ae3c06920b
- SHA512 0996588a07eba0cd886421d277c731d1436fe3a80c631e646677e9c1c7c2941490d1711dbab2929d40cc5e89449d3513388ccfebf62d5a9ca4ca031197db3637
- SSDEEP 768:rkyYsGbkAG7BH2oJj0P/XtQxw9v185jvbi0AmeeJ:rkyZAGoA6/XaW9Ncbi0AmeeJ
- TLSH T138D29D93735106A955C368DA007EE40F6375CEAF347904E2FBEED6DF266A4903A642B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
020fef3208a181a1a5fcd03cf701df06d30b6f9595879d76c0c0f5b6c66c21cb.ps1
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
020fef3208a181a1a5fcd03cf701df06d30b6f9595879d76c0c0f5b6c66c21cb.ps1
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 020fef3208a181a1a5fcd03cf701df06d30b6f9595879d76c0c0f5b6c66c21cb
- Size 28KB
- SHA256 020fef3208a181a1a5fcd03cf701df06d30b6f9595879d76c0c0f5b6c66c21cb
- MD5 73d3a8a2433f1e6631f331ca1109687a
- SHA1 4fb70fe0eaed15538d3a60e4edd896ae3c06920b
- SHA512 0996588a07eba0cd886421d277c731d1436fe3a80c631e646677e9c1c7c2941490d1711dbab2929d40cc5e89449d3513388ccfebf62d5a9ca4ca031197db3637
- SSDEEP 768:rkyYsGbkAG7BH2oJj0P/XtQxw9v185jvbi0AmeeJ:rkyZAGoA6/XaW9Ncbi0AmeeJ
- TLSH T138D29D93735106A955C368DA007EE40F6375CEAF347904E2FBEED6DF266A4903A642B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.