General
-
Target
BlockTheSpot.bat
-
Size
265B
-
Sample
240305-rh9hsahe86
-
MD5
d2a6bb7593c8c2c054a65c6d2167197a
-
SHA1
721bc41054dfbdac908e11881e5c1885002a8183
-
SHA256
8b78d1071a5c9add21685f9607f42010ef8c04fd4a789a45fe8678fde6ab1d24
-
SHA512
48fbc3ef45ec6b1fe3fd6a6d832739308bcf84c4bd7fa83b7295e054a29dda15cc0b70d93ef43906c3c9fb4194e66eab02eb8863d2a1a5646c18d7b3a52984ca
Static task
static1
Behavioral task
behavioral1
Sample
BlockTheSpot.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
BlockTheSpot.bat
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
BlockTheSpot.bat
-
Size
265B
-
MD5
d2a6bb7593c8c2c054a65c6d2167197a
-
SHA1
721bc41054dfbdac908e11881e5c1885002a8183
-
SHA256
8b78d1071a5c9add21685f9607f42010ef8c04fd4a789a45fe8678fde6ab1d24
-
SHA512
48fbc3ef45ec6b1fe3fd6a6d832739308bcf84c4bd7fa83b7295e054a29dda15cc0b70d93ef43906c3c9fb4194e66eab02eb8863d2a1a5646c18d7b3a52984ca
Score8/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-