General
- Target command.ps1
- Size 42B
- Sample261002-wvvmlsxtfs
- SHA256 0c3f107985b4f908e2a76e0c80a556ba7d46d3d0cb7bcd5374f437feaad94f22
- MD5 2fdd3ce825e0fb357e293aa2b0bab510
- SHA1 00d21abeb55c0adc9b691abd99f813ca9e740aa8
- SHA512 922080a711e6f95efa6a587f462ffd073003188e83833866cd0a1b644284f8959d39d5f8cfcfed22425d3edf53367268920ccbc534569f689bcbf1eece6d48d7
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
command.ps1
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.ps1
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target command.ps1
- Size 42B
- SHA256 0c3f107985b4f908e2a76e0c80a556ba7d46d3d0cb7bcd5374f437feaad94f22
- MD5 2fdd3ce825e0fb357e293aa2b0bab510
- SHA1 00d21abeb55c0adc9b691abd99f813ca9e740aa8
- SHA512 922080a711e6f95efa6a587f462ffd073003188e83833866cd0a1b644284f8959d39d5f8cfcfed22425d3edf53367268920ccbc534569f689bcbf1eece6d48d7
- MD5 SHA1 SHA512
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.