Overview

overview

8

Static

static

1

Purge_WB.bat

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Purge_WB.bat

  • Size

    5KB

  • Sample

    240805-3tyffasenj

  • MD5

    895acbc5a11a2878f9f1be4d6fbde662

  • SHA1

    41d41071a821dc4b1ada2941955e561bae8d27b4

  • SHA256

    0da884ddad29cf36f90783a57b2587a8178b3a0f4ea2249f9b14b83e5ba62df9

  • SHA512

    3ec78748bd628b55b82d57282f4261dba52b8dbb7ea15d2b281346bef967154c0d05c0854289acb0c900f47007b8f39f6934d59b4bf6b0b73f7a333505c63dd6

  • SSDEEP

    96:GeI8huOXdzgWE9BrY7Tof33UHL7ZDgCOw/OW8z7J124JJYiAnrT8EMJ124J1:GeIuFi/iTof33UHBgWu7KekTLMKe1

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Purge_WB.bat

    • Size

      5KB

    • MD5

      895acbc5a11a2878f9f1be4d6fbde662

    • SHA1

      41d41071a821dc4b1ada2941955e561bae8d27b4

    • SHA256

      0da884ddad29cf36f90783a57b2587a8178b3a0f4ea2249f9b14b83e5ba62df9

    • SHA512

      3ec78748bd628b55b82d57282f4261dba52b8dbb7ea15d2b281346bef967154c0d05c0854289acb0c900f47007b8f39f6934d59b4bf6b0b73f7a333505c63dd6

    • SSDEEP

      96:GeI8huOXdzgWE9BrY7Tof33UHL7ZDgCOw/OW8z7J124JJYiAnrT8EMJ124J1:GeIuFi/iTof33UHBgWu7KekTLMKe1

    Score
    8/10
    discoverypersistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks