Overview

overview

10

Static

static

1

main.bat

windows7-x64

1

main.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main.bat

  • Size

    72KB

  • Sample

    240920-zqlqpaxemg

  • MD5

    9f14d8dad3856dfa4e9de47c35384059

  • SHA1

    df9fc4c4ef86d9652495b80f8b78043692cd41db

  • SHA256

    16ed4d228a5113fce098e69d4471b0e5829797882ac3bb5b19c61277fda25b02

  • SHA512

    b2fb7562cc0819fe2bd0c4fbe16d10b44f112a11b7a0a7f097f4f0d61c5c1770b2ddb2ffa08fdc5b14a7603c0e2f10fa2dd445b7e23eeb55a98d8bd535f53d4d

  • SSDEEP

    768:IposY9qsaIZz+QK7ruEDHs2guEDHsaOmh82mnUjQxOn1TS6QeQg+mispepU:ICsYOBm9mnUk01SeQg+miU

Score
10/10
evasionexecutionpersistenceransomware

Malware Config

Targets

    • Target

      main.bat

    • Size

      72KB

    • MD5

      9f14d8dad3856dfa4e9de47c35384059

    • SHA1

      df9fc4c4ef86d9652495b80f8b78043692cd41db

    • SHA256

      16ed4d228a5113fce098e69d4471b0e5829797882ac3bb5b19c61277fda25b02

    • SHA512

      b2fb7562cc0819fe2bd0c4fbe16d10b44f112a11b7a0a7f097f4f0d61c5c1770b2ddb2ffa08fdc5b14a7603c0e2f10fa2dd445b7e23eeb55a98d8bd535f53d4d

    • SSDEEP

      768:IposY9qsaIZz+QK7ruEDHs2guEDHsaOmh82mnUjQxOn1TS6QeQg+mispepU:ICsYOBm9mnUk01SeQg+miU

    Score
    10/10
    evasionexecutionpersistenceransomware

    • Disables service(s)

      evasionexecution

    • Modifies boot configuration data using bcdedit

      ransomwareevasion

    • Stops running service(s)

      evasionexecution

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks