General
- Target 944bfe82b949fcb0.ps1
- Size 4KB
- Sample261113-b1w3eaev71
- SHA256 944bfe82b949fcb067d4aa0463af94a13cfd7c97dfdd8ae8d9ff5ebcebaa22f2
- MD5 f208c8afb9b34f05ea38c406659bb6f0
- SHA1 37fce4d43c2a5a6989376aec0f464e2ea048d984
- SHA512 37f4b2b59676a345ff22fd4ff368baa9cb2e6528eeb667db5e23066e1908bb08ada302dde5bb9f0b2c907d0284c5534affd77e74023b34d2d1833d381aae4fdd
- SSDEEP 96:Pm2c+RZ2rDum2GGErLqalNJ7DK+B2JG+E7Reakj0FstAhF6B+pzmUgn:Pc+R0rDuDErxf7DK+84R9FFob2zmt
- TLSH T11B813590FE48E4D1896759F7FC6A3E56D23812B1DCCA26C80398B2D927B7B359718CC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
944bfe82b949fcb0.ps1
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
944bfe82b949fcb0.ps1
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 944bfe82b949fcb0.ps1
- Size 4KB
- SHA256 944bfe82b949fcb067d4aa0463af94a13cfd7c97dfdd8ae8d9ff5ebcebaa22f2
- MD5 f208c8afb9b34f05ea38c406659bb6f0
- SHA1 37fce4d43c2a5a6989376aec0f464e2ea048d984
- SHA512 37f4b2b59676a345ff22fd4ff368baa9cb2e6528eeb667db5e23066e1908bb08ada302dde5bb9f0b2c907d0284c5534affd77e74023b34d2d1833d381aae4fdd
- SSDEEP 96:Pm2c+RZ2rDum2GGErLqalNJ7DK+B2JG+E7Reakj0FstAhF6B+pzmUgn:Pc+R0rDuDErxf7DK+84R9FFob2zmt
- TLSH T11B813590FE48E4D1896759F7FC6A3E56D23812B1DCCA26C80398B2D927B7B359718CC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Downloads MZ/PE file
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.