Local reference
Suspicious dependency
Inferred
Mal-ecule
O(C)H(Cm)
Objectives
notable severity, 90% confident.
command-and-control/channel/deaddrop
Microsoft Graph mailbox client
component severity, 94% confident.
command-and-control/backdoor/tasking
Regex component marker
component severity, 95% confident.
evasion/indicator-removal
Regex component marker
Micro-behaviors
suspicious severity, 85% confident.
communications/http/lib
Potential data exfiltration via HTTP
baseline severity, 90% confident.
communications/http
HTTPS protocol prefix
component severity, 90% confident.
data/text/keywords
Destructive delete verb
Metadata
baseline severity, 78% confident.
lang
PowerShell type accelerator syntax
component severity, 90% confident.
file/text
File has 30 or more lines
Identity
| SHA-256 | a860eab81c7d96ef49fbd88dafd30afc5f41a18e8203f786060bf98d668cafee |
|---|---|
| Filename | PlannerTaskObject.psm1 |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 23:20 UTC |
|---|---|
| First analyzed | 8 Jun 2026 04:30 UTC |
| Last analyzed | 8 Jun 2026 04:30 UTC |
| Last updated | 8 Jun 2026 04:30 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 8e9ac |
Not seeing what you expected? Let us know