Overview
overview
7Static
static
3VisualBat/...te.exe
windows7-x64
1VisualBat/...te.exe
windows10-2004-x64
1VisualBat/...at.exe
windows7-x64
1VisualBat/...at.exe
windows10-2004-x64
1VisualBat/...lp.chm
windows7-x64
1VisualBat/...lp.chm
windows10-2004-x64
1VisualBat/...md.vbs
windows7-x64
1VisualBat/...md.vbs
windows10-2004-x64
1VisualBat/...rt.vbs
windows7-x64
1VisualBat/...rt.vbs
windows10-2004-x64
1VisualBat/...nd.vbs
windows7-x64
1VisualBat/...nd.vbs
windows10-2004-x64
1VisualBat/...or.vbs
windows7-x64
1VisualBat/...or.vbs
windows10-2004-x64
1VisualBat/...pe.vbs
windows7-x64
1VisualBat/...pe.vbs
windows10-2004-x64
1VisualBat/...sh.vbs
windows7-x64
1VisualBat/...sh.vbs
windows10-2004-x64
1VisualBat/...et.vbs
windows7-x64
1VisualBat/...et.vbs
windows10-2004-x64
1VisualBat/...at.exe
windows7-x64
1VisualBat/...at.exe
windows10-2004-x64
1VisualBat/...��.bat
windows7-x64
1VisualBat/...��.bat
windows10-2004-x64
1VisualBat/...��.bat
windows7-x64
3VisualBat/...��.bat
windows10-2004-x64
3VisualBat/...��.bat
windows7-x64
1VisualBat/...��.bat
windows10-2004-x64
1VisualBat/...��.bat
windows7-x64
1VisualBat/...��.bat
windows10-2004-x64
1VisualBat/...��.bat
windows7-x64
7VisualBat/...��.bat
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 21:54
Static task
static1
Behavioral task
behavioral1
Sample
VisualBat/3SOFT/IcoSprite.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
VisualBat/3SOFT/IcoSprite.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
VisualBat/3SOFT/RegToBat.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
VisualBat/3SOFT/RegToBat.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
VisualBat/Dos_help.chm
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
VisualBat/Dos_help.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
VisualBat/Dos命令/Cmd.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
VisualBat/Dos命令/Cmd.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
VisualBat/Dos命令/DiskPart.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
VisualBat/Dos命令/DiskPart.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
VisualBat/Dos命令/append.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
VisualBat/Dos命令/append.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
VisualBat/Dos命令/for.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
VisualBat/Dos命令/for.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
VisualBat/Dos命令/ftype.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
VisualBat/Dos命令/ftype.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
VisualBat/Dos命令/netsh.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
VisualBat/Dos命令/netsh.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
VisualBat/Dos命令/set.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
VisualBat/Dos命令/set.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
VisualBat/VisualBat.exe
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
VisualBat/VisualBat.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
VisualBat/常用实例/1.DLL组件注册.bat
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
VisualBat/常用实例/1.DLL组件注册.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
VisualBat/常用实例/2.查看电脑硬件信息.bat
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
VisualBat/常用实例/2.查看电脑硬件信息.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
VisualBat/常用实例/3.列举进程.bat
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
VisualBat/常用实例/3.列举进程.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
VisualBat/常用实例/4.dos下重启.bat
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
VisualBat/常用实例/4.dos下重启.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
VisualBat/常用实例/5.删除自身.bat
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
VisualBat/常用实例/5.删除自身.bat
Resource
win10v2004-20240709-en
General
-
Target
VisualBat/VisualBat.exe
-
Size
1.4MB
-
MD5
24409c661ddec78c3ccf64c0f7b2dc5a
-
SHA1
2e537fb85875dd81688bb0cbe9c2bbb9994e7787
-
SHA256
591c7d9c57166d2ea5b24a08e60163a18f2ea974dfd3ddf5d9bef364333060c6
-
SHA512
02fcb2235db611b71dd7f33af9fc5f9bb03037d5ca640dd50a71b16e0ace6ea40e05c26c5d54e2f2d5460cf45ba372dd0492db49739011e86e769f733fa2b2ce
-
SSDEEP
24576:7vvxCBJACRWYHivaiGb3gHBLx4AsCxaRDYyZqIDH7zW/F4TU:7nxaRWyIrNFxa1ZbStH
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4832 VisualBat.exe