General
- Target command.ps1
- Size 42B
- Sample261002-tk2l3adg68
- SHA256 9872ffdbf6f734c616e92d51b443f4848a8e81d2bb417d24f7e5e9109a41f4af
- MD5 c0878bf6d427de135083fdd86ce8b3c0
- SHA1 48579d6907d39b3c00d676e24e68d5b4d668f98c
- SHA512 1f3407f145de7dbbe24663b39e7fe95ec4208fdc85a0fb2ff70c33e69328007a4b5eda4a839a3bf38b47701b764bd3db1568753fe823ebd8628bc15ff9f1428b
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
command.ps1
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.ps1
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target command.ps1
- Size 42B
- SHA256 9872ffdbf6f734c616e92d51b443f4848a8e81d2bb417d24f7e5e9109a41f4af
- MD5 c0878bf6d427de135083fdd86ce8b3c0
- SHA1 48579d6907d39b3c00d676e24e68d5b4d668f98c
- SHA512 1f3407f145de7dbbe24663b39e7fe95ec4208fdc85a0fb2ff70c33e69328007a4b5eda4a839a3bf38b47701b764bd3db1568753fe823ebd8628bc15ff9f1428b
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.