General
-
Target
oran (2).bat
-
Size
3KB
-
Sample
240528-y6yvhsah4x
-
MD5
751db7140d2911f5bfc65cf03b42252f
-
SHA1
76ed57e4cf65e4735e916dc7d427f218191559c5
-
SHA256
f17a109dff8890fa19ea9f4324c49daabf22d4b5c9386a1a819268f04eb9adeb
-
SHA512
e46d6360e1753a3f809ae40873d5fcde355a1c2a2f2f7f6724bda1e4270ef616df9a00670551592439de5c14c00c94fc2be2e7581f3f391db17cac770eae2090
Static task
static1
Behavioral task
behavioral1
Sample
oran (2).bat
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
oran (2).bat
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
oran (2).bat
-
Size
3KB
-
MD5
751db7140d2911f5bfc65cf03b42252f
-
SHA1
76ed57e4cf65e4735e916dc7d427f218191559c5
-
SHA256
f17a109dff8890fa19ea9f4324c49daabf22d4b5c9386a1a819268f04eb9adeb
-
SHA512
e46d6360e1753a3f809ae40873d5fcde355a1c2a2f2f7f6724bda1e4270ef616df9a00670551592439de5c14c00c94fc2be2e7581f3f391db17cac770eae2090
Score7/10-
Registers COM server for autorun
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-