36f3c4282f17382be001ef09844927a5fc2fd785653dae8b2cd7d3f1e6b945ac | Triage™

Login
Reports

Overview

overview

5

Static

static

3

PocketDriv...ve.exe

windows10-2004-x64

3

PocketDriv...ve.exe

windows11-ltsc_2024-x64

3

PocketDriv...40.dll

windows10-2004-x64

1

PocketDriv...40.dll

windows11-ltsc_2024-x64

1

PocketDriv...z2.dll

windows10-2004-x64

1

PocketDriv...z2.dll

windows11-ltsc_2024-x64

1

PocketDriv...es.dll

windows10-2004-x64

1

PocketDriv...es.dll

windows11-ltsc_2024-x64

1

PocketDriv...al.dll

windows10-2004-x64

1

PocketDriv...al.dll

windows11-ltsc_2024-x64

1

PocketDriv...ib.dll

windows10-2004-x64

1

PocketDriv...ib.dll

windows11-ltsc_2024-x64

1

PocketDriv...ma.dll

windows10-2004-x64

1

PocketDriv...ma.dll

windows11-ltsc_2024-x64

1

PocketDriv...sl.dll

windows10-2004-x64

1

PocketDriv...sl.dll

windows11-ltsc_2024-x64

1

PocketDriv...to.vbs

windows10-2004-x64

5

PocketDriv...to.vbs

windows11-ltsc_2024-x64

5

PocketDriv...ck.vbs

windows10-2004-x64

5

PocketDriv...ck.vbs

windows11-ltsc_2024-x64

5

PocketDriv...tp.ps1

windows10-2004-x64

3

PocketDriv...tp.ps1

windows11-ltsc_2024-x64

3

PocketDriv...it.vbs

windows10-2004-x64

5

PocketDriv...it.vbs

windows11-ltsc_2024-x64

5

PocketDriv...se.vbs

windows10-2004-x64

5

PocketDriv...se.vbs

windows11-ltsc_2024-x64

5

PocketDriv...ge.vbs

windows10-2004-x64

5

PocketDriv...ge.vbs

windows11-ltsc_2024-x64

5

PocketDriv...ay.vbs

windows10-2004-x64

5

PocketDriv...ay.vbs

windows11-ltsc_2024-x64

5

PocketDriv...fe.ps1

windows10-2004-x64

3

PocketDriv...fe.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
PocketDrive-Windows.zip
Size 10.7MB
Sample261102-g1pk8a1th1
SHA256 36f3c4282f17382be001ef09844927a5fc2fd785653dae8b2cd7d3f1e6b945ac
MD5 b1fcca0a08f7e780c80c022950430811
SHA1 c646aa9229f39dfcb28baecb9038707d633d8b33
SHA512 f167a41dc951cb5c8d007683f33371763951069e0664458a6772597f0e3ca38f065c9b21c26ee0fb7403cc96fbb86a63eecf2e64d647ddb69b045fe059de82ee
SSDEEP 196608:jNitIkrxQktyopq0VALGJe8/IOKJ/8HJ8XxuaPxwd:hitIkr/YUJVAis8/C/S8huOwd
TLSH
T165B633B1EC7A048EF7F2953651970F13100839A919C68B5E59EC49CA7C7309BEB0AF5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

PocketDrive-Windows/PocketDrive.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

PocketDrive-Windows/PocketDrive.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

PocketDrive-Windows/_internal/VCRUNTIME140.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

PocketDrive-Windows/_internal/VCRUNTIME140.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

PocketDrive-Windows/_internal/_bz2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

PocketDrive-Windows/_internal/_bz2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

PocketDrive-Windows/_internal/_ctypes.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

PocketDrive-Windows/_internal/_ctypes.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

PocketDrive-Windows/_internal/_decimal.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

PocketDrive-Windows/_internal/_decimal.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

PocketDrive-Windows/_internal/_hashlib.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

PocketDrive-Windows/_internal/_hashlib.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

PocketDrive-Windows/_internal/_lzma.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

PocketDrive-Windows/_internal/_lzma.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

PocketDrive-Windows/_internal/_ssl.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

PocketDrive-Windows/_internal/_ssl.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

PocketDrive-Windows/_internal/_tcl_data/auto.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

PocketDrive-Windows/_internal/_tcl_data/auto.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

PocketDrive-Windows/_internal/_tcl_data/clock.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

PocketDrive-Windows/_internal/_tcl_data/clock.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

PocketDrive-Windows/_internal/_tcl_data/http1.0/http.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

PocketDrive-Windows/_internal/_tcl_data/http1.0/http.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

PocketDrive-Windows/_internal/_tcl_data/init.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

PocketDrive-Windows/_internal/_tcl_data/init.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

PocketDrive-Windows/_internal/_tcl_data/opt0.4/optparse.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

PocketDrive-Windows/_internal/_tcl_data/opt0.4/optparse.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

PocketDrive-Windows/_internal/_tcl_data/package.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

PocketDrive-Windows/_internal/_tcl_data/package.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

PocketDrive-Windows/_internal/_tcl_data/parray.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

PocketDrive-Windows/_internal/_tcl_data/parray.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

PocketDrive-Windows/_internal/_tcl_data/safe.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

PocketDrive-Windows/_internal/_tcl_data/safe.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  PocketDrive-Windows/PocketDrive.exe
- Size 2.1MB
- SHA256 819065015c064e20c5fd58c48d27782ca434dbe1fc17339983fcb5b5404b7da1
- MD5 a8967fd70c774b6fa4460e2a2f62771c
- SHA1 066d94bdb1314b443f3f9e5d3799b8301eb08187
- SHA512 a5dbbd0f9ceee72b4ba0832b13c12ae7f84d6009e8741f61ba37fb3facb858da5a21f1a6bc1961ba6e7bb8f166fa5706056a5b061bfeab8d950441f74c37d546
- SSDEEP 49152:0P5KgjcNPvEO7ynxSoxaJ+iThmK4Ey1F0G76ELxea:tPvEH8+if4Eux6ELI
- TLSH
  T1BDA52359E7E104F6F8F3D23CDAA28466D7B278620775D6CF03A4416A3F236E1183A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  PocketDrive-Windows/_internal/VCRUNTIME140.dll
- Size 174KB
- SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
- MD5 07bc2f9c4c1b07e1cc013ca0079b31ac
- SHA1 1098f2a834146995df7a91c78f72f210d8d2d12d
- SHA512 8fd063d61d1c57bfae5ef105b1796c141ef2752dbad17ae79f974c417542c075bc8b4ac12163629a74e43004fd9cf170a76de9d11841b6e5c236f5b47fbbb09b
- SSDEEP 3072:aoq3aLPst/GrhA4gBSnSQ37QwZyeBB0ecbavp7D:aofLPsmBnSQ3VyeBB0ecbaV
- TLSH
  T1C6048D51B2CC00B2E92B9674CCD69553D6B1B0057B30AADF47A846782F33FF2A63DA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  PocketDrive-Windows/_internal/_bz2.pyd
- Size 84KB
- SHA256 261545bd24f15a783fc0c82568b766a4ab569dde14507a81701cccf5293e6e54
- MD5 b18acc96186c2bb1ed0b3256374e4f83
- SHA1 e2eb7b2e642de5866b597533d100848d1e1d0644
- SHA512 aba2bb8052000bf57f2fbf9ba9859c2678c384ed046d71edc288cd168e288169003a9f7868c3263491c1073e633e4bb187ee0c68fb287f7d454428e406c12a44
- SSDEEP 1536:/TVAz72U4OBcir2QVSZZOhcKJsawo8YfsDPYJIqLVfyPs5i9LgfIL2F:7VAz6UAixQjOaSsamYkDPYJIqLVghs
- TLSH
  T1FF838F97A76471F6F9AF81B5D6800363E730BB560710A3AFB244C3453F12B81AF68369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  PocketDrive-Windows/_internal/_ctypes.pyd
- Size 131KB
- SHA256 9d6dccb4cd84a44a107f9b06b91c0a44e85766d9bf4debb6abbde8fda7494c2c
- MD5 f75c30ccf8ecf05a2ba83cb06eeb354f
- SHA1 962545549964c61dfbd31ab7d52ed470f7c5a9d6
- SHA512 277f113ef07c02c83e7542899104cd8a1e626e84a7b9b0f9d68e8562ac6221413cfac14b84c5db5156bebe80381034273529abadaa01592b11c6d346cf95e24a
- SSDEEP 3072:/uZ3aSoXIGagR+lf/FTzy4JxXBUnFIqyPst:Gobqf/FTzyixRUnn
- TLSH
  T186D37E0B776800AADAA39178C533AF47EFB1B453161097CF02A4C59A2F637966E7F305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  PocketDrive-Windows/_internal/_decimal.pyd
- Size 280KB
- SHA256 1e6a5707163d3c103e0eb4695eefedbea4b855fb227c61cc265b168970d6c6f0
- MD5 8a67ac25a0f304fba18e882afbea7f60
- SHA1 de28b556f1efaeedf50edfc53dd3f0482b54c9de
- SHA512 67ad353c747d50242490cd74714f13b1e82a47d2b7372ec413fac836cba3a76b905650d87b4836b7e937cd8d73e483fe6ebe67f9b8385c346eebdd041c085743
- SSDEEP 6144:qz6VmybB6sitSyyrQGqqM33fIWeAJYVwMHdOs:quI4B6sPRoLYVF9Z
- TLSH
  T1B1546C97A2490CA8EE73807489479B47F7B278860360D78F43B48AA73F93793676D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  PocketDrive-Windows/_internal/_hashlib.pyd
- Size 67KB
- SHA256 79a26289aef0d92545a082507c7021f10e219621d137cb726c4d0fbbfd4b46ae
- MD5 4949202690a7f755717b685a99e21092
- SHA1 42ad37b620d204a8fcd5bdb2c09609b43639d1ac
- SHA512 52172d67a60e79bec735c9b71ccf5c5b558c436391735256a4168a200911c0d7d09d22c86cf8fb75331afc02f9924c395ce1b28c9516c9e9207b9885a9da9894
- SSDEEP 1536:eqXn1yAu1lEAXfXEfcV5Tam96CAhIqvICyPs5i9rfIYzWS:z1w1uAcfcym96CAhIqvIQu
- TLSH
  T11E637C9596894092E92382B5C4A34F83FA75F3521711ABDFA2A8C0CD2F233C78777756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  PocketDrive-Windows/_internal/_lzma.pyd
- Size 155KB
- SHA256 ee224aacf5cf9c9974a1b842aac8d89d5d9b7eeebbf4d76619ae0ce4da8ecd96
- MD5 9b3c9bae696ae1f89846da9dbb44e5ec
- SHA1 91e21fdecb5080d083df18d62b1a44e24929b1e6
- SHA512 8150fd33a5a36fe6d541e2fe30c8b716f95eaa65d9355ed23ca40d269547697b21156a023381e5d3c7923bf878447bbc9888916ce51661010868a14e4231a60e
- SSDEEP 3072:DK1fxTOfpRnifp5/eNRFcznf59mNoB/ujJIq01Ht0:D6JTOjKsHShYOoj0y
- TLSH
  T1B8F35B86B794F0E5F7728C38D2624F57E6F5785A0320929A01CC936D2B1FB659E2E313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  PocketDrive-Windows/_internal/_ssl.pyd
- Size 177KB
- SHA256 8d2f51fa1dc929073a2ad8d1c7c0c911e8f695870dcf4dda2846f4b75a7f77fb
- MD5 e1da7e7534206b6f2d3d025c847c9df6
- SHA1 74585fb3b0f1b46fd3f90d81d5c6bb3cbdc930d7
- SHA512 fd8ae255deb3d933e27da712f093d21f8d02c74e57b8044da9a9e8076a5710ea27409ecca4cea6b49f7f0ee9bb6f6a004311d7baa3ef5211452126bc3eee09b7
- SSDEEP 3072:S9fZJvjN6U2kGMlfz6CvcyMNdmI7IM/cbPuC/JeJIqL7Og:S9xJrEU2tqz6CviPssT
- TLSH
  T135047C47B5945AF7D813E4F9C1234903EBB0F1553312479E48D6E64A0F03B4AAEAAB73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  PocketDrive-Windows/_internal/_tcl_data/auto.tcl
- Size 21KB
- SHA256 08113823951619d659eb03a1f6acd2f9500e1264795219125a5df7b83cabcb99
- MD5 97efa9ebe840ea051f9706504c8bd783
- SHA1 287dea14d47977dcd8edc525fe750c836264db5c
- SHA512 ab9fc210f3bfd181cc2b93dd348415f67f763b2c7961179a88eba3f7f87e44b21a66ea4ea53715fb88784288c75b8270640f3bc6beafb0e8cc21966068a79bf2
- SSDEEP 384:UqT9XC9VZvWQjCTzsCTV7672ORgS0myvxFRTX7Xvt3wBTnbXhCUquyvz:LT9XC9VZvhjCPsCp7JlmyvTxvt3gTnbW
- TLSH
  T1EFA2B7635F9542A630B1C22B553DB9A4EF2F81B70675801D38F8912C37F1815C6BEAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18
- Target
  PocketDrive-Windows/_internal/_tcl_data/clock.tcl
- Size 129KB
- SHA256 bd1c2dc481a582ef9eab301468ec7e7c3a284c57617fb2f4a8a97c22576fc762
- MD5 31bb1cacf5d128f77c0922800d3e111a
- SHA1 93262bdfa958cd64906fb8c24db59294730c5747
- SHA512 a156698c7dd9ae3dfcd2512e59a0a382027a23b52330191464f00d6efa96a22bead2d7c470f0f44b07a2dbc209a2451eb92ca91355ece75f0e23084b9e2848ca
- SSDEEP 3072:Ybn4IdhYvuCS9epsF4AzqpSMpWzP7ejMiIAEBsq6UkPAPaZqHYM8EN4LhVLAMrXl:Ybn4IB9epsF4SqpSMpWzP7ejM/NBsq6P
- TLSH
  T1AAD3A6027F19412E71B2D3364ABAE198DF2ED1B776AB805CBCAE405C3B1091446BFBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral19 behavioral20
- Target
  PocketDrive-Windows/_internal/_tcl_data/http1.0/http.tcl
- Size 9KB
- SHA256 fa7b657aa7d5bbd1bf1e3fbba8bb26fddd6ccff5805625d2e400db5ebe1f968a
- MD5 bef74a91e2e8f1252f594781427a0122
- SHA1 d5e6730f3e65e3b07482f1af9ee13605566adcb7
- SHA512 ffcc7316ae0b7758c4d01a4bcf9c8007ca4e1b5555955862c72520507e55d80da251706310be9db85ed75a6f319879b8ce20bc4b9c9433d0d7c97fda8c80e585
- SSDEEP 192:kipkqA3KsBMAikGJ4kIWPa95KTBoF7dg/8YNkgQ4id:TkqWKsB8kGJ4kIWPaDFzTd
- TLSH
  T1CD226485620691AD6DB2433ACEB990B0EE3A51B321B9416CBC5DC1643F7250E9FFCBD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  PocketDrive-Windows/_internal/_tcl_data/init.tcl
- Size 25KB
- SHA256 acacce15658dd7ce8f69b1e3d3a94770a22972a8e906eb3b61cd06f0ecd5db59
- MD5 ffe4e47b5f4f96ec33fb31d52ef0b636
- SHA1 3a625e493f8778277f65ffef1e0879fbec0e4d0d
- SHA512 dbbfd92ab6d95672f7882f3affb75f31749281c7450c29fcef58b5bdfd4f42b6d1d9f3a50ae0d3aa27e95d48918ed55cde5149751f892538bdd2dc39c618927e
- SSDEEP 768:+XrgPHudKlE7BG6Xg3tMo846ofRRECL9QDjr5v7hzx/i:igGdKlK4Ao846offLmNhNi
- TLSH
  T104C2A8112388917932B3533686B5E598EE7EC1F706A941BCBCCC825C777150A4AFDBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23 behavioral24
- Target
  PocketDrive-Windows/_internal/_tcl_data/opt0.4/optparse.tcl
- Size 32KB
- SHA256 b8ac6c849dd7ee771f9d95718c3b9fc289872f05bfb1a36d32fde8edcba5e1c4
- MD5 403ee782437d9e848593a8c9a143863f
- SHA1 8994c3fe6cccf42a72f1b08e95f89621ef6163ab
- SHA512 feb740cca1a5243347beeb86b6f29582f85b4649050c8a2a65997aca75e2d7dd70f53568ecbb5a25a9947239b3ae690de615ffffa8e44c6b9020f2e0bae457d1
- SSDEEP 768:4DXxAptehhnN+ZgG6sRclBAdtsoLKiF64aJQ2L:kOSh14pCBAdqva5aJvL
- TLSH
  T192E28226BA45629D26B252368E798451FF3EC2735296407CFC9C817C3FB0942C6BEBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25 behavioral26
- Target
  PocketDrive-Windows/_internal/_tcl_data/package.tcl
- Size 23KB
- SHA256 b471cec9056b62d562020b14d69d4bd1f92dfe158afc8ba81c6341836211ca46
- MD5 6a7b6485d3b290fc5d412ed1d62a170d
- SHA1 50475e80e3969de279edfb1bf8d9c19694c36c0b
- SHA512 36ced797ec18d4aa68fcce57f6eb510e78508d14646cf43ea2effb6f2cf88529d0cb5a4a136fb1252edbb95cba646bdcd19a8cd90a86b19fc28bb9611e2ccb73
- SSDEEP 384:8xgrmNIpEHsDAW2UfnImRqXqQx6XmchmCWhzPLrXJjJh6PLfzd7lG:8xgrmNIwsDnvIm86QGRhLWhzDzJ9h6DS
- TLSH
  T14BB2C821B389915A34B153639B352D8CCF3EC0FF51A951BC78D482BC776092A0ADE7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  PocketDrive-Windows/_internal/_tcl_data/parray.tcl
- Size 844B
- SHA256 e269029c8263e3cbc1920c3604ecdcf15edccb208a0d68f9eb42b73954d620c0
- MD5 577787c2f4f5956ba70f83012b980ae5
- SHA1 040b2469f796f3fdfcd1e1dd2eb1c5b799edef62
- SHA512 c2940f6f3d77412efc537b8ab67352f519dffa95739fcc17bf1817335afd9e5bfe91abe98cba99e278cb4923d4e6d431ed9d72282745203c0f7d73193f550238
- TLSH
  T16A011201430160ED22B1C33642E5EA48CD2219361DD66A99F4CB4138BFF1D2486B07A6
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  PocketDrive-Windows/_internal/_tcl_data/safe.tcl
- Size 41KB
- SHA256 5359b1a04e22823101661590136325561524372ae0f5dc7dd320422689667201
- MD5 d759c76c507d67b06e97126a04b183c0
- SHA1 4ff9124081fa735b8951e9386a4de11236cefe9d
- SHA512 61100fd6c15974bffd9093321079ec2fc81ffc7ff28403cc456261760afaa02dbaf1421e81aa0c98e52d147c946efa98fc29851ac0a5973fdadf8cce1f711cdf
- SSDEEP 768:H/Jo8y7AyERYhZfc98jlLDRIwEfOtoYx4WneNiBq5vIhNMaqadlUCJyPbb1P6:H/c7AOhZu8jtDRIP924WneNiBq5+NMa5
- TLSH
  T1D11397126B43579D387283329D7AD6A4EF3D80FB42AA40BCB44CE16C3F71419466EBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy