General
- Target command.ps1
- Size 42B
- Sample261002-wvtejsxtex
- SHA256 4b9e9c9c68694c9324bc5ae94b2a99a6989e886cc9b7defb46488aec46b9eee6
- MD5 450237a00d0e1382aa6ceb091c7869c1
- SHA1 b3ba5707da6380126b2c7e65685c7d9082e2e245
- SHA512 e82dbf2618cf02ec7c442d2c2081657220b625a68ffd1e7521b82f64d7ac27ca3ead83c4a0821f9fd33c07248db550b1c200d914cc20feb655b847bf05f6b578
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
command.ps1
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.ps1
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target command.ps1
- Size 42B
- SHA256 4b9e9c9c68694c9324bc5ae94b2a99a6989e886cc9b7defb46488aec46b9eee6
- MD5 450237a00d0e1382aa6ceb091c7869c1
- SHA1 b3ba5707da6380126b2c7e65685c7d9082e2e245
- SHA512 e82dbf2618cf02ec7c442d2c2081657220b625a68ffd1e7521b82f64d7ac27ca3ead83c4a0821f9fd33c07248db550b1c200d914cc20feb655b847bf05f6b578
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.