General
- Target batty.bat
- Size 4KB
- Sample240929-jh96bavdpp
- SHA256 766d22bf250aab9e31d95aeadc35c4bab5e5bbbaf0538c0fb7b7d74fc13cf277
- MD5 9f3acd56e646d8eae4647eeffa0741cd
- SHA1 0e916f49a089823411d0b444454a867bf9fb1f2f
- SHA512 c62649abf78880ba063d7290f0b4665c668c39f3a3e8ac3c92bf541016c6d6dc7e43cd1c6370a9beb0499b695b40786ff7b10429cedafba6f683bc377ccc0a7c
- SSDEEP 48:17l9BNXcf6iQW2FK+8OEW9+HeEdUm/E2n23WwkFEeJE/sPEijE1Ms9Xc/fDKyebm:17jE+8+8HFU22mZXMGEny/N7bDjT
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
batty.bat
Resource
win11-20240802-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target batty.bat
- Size 4KB
- SHA256 766d22bf250aab9e31d95aeadc35c4bab5e5bbbaf0538c0fb7b7d74fc13cf277
- MD5 9f3acd56e646d8eae4647eeffa0741cd
- SHA1 0e916f49a089823411d0b444454a867bf9fb1f2f
- SHA512 c62649abf78880ba063d7290f0b4665c668c39f3a3e8ac3c92bf541016c6d6dc7e43cd1c6370a9beb0499b695b40786ff7b10429cedafba6f683bc377ccc0a7c
- SSDEEP 48:17l9BNXcf6iQW2FK+8OEW9+HeEdUm/E2n23WwkFEeJE/sPEijE1Ms9Xc/fDKyebm:17jE+8+8HFU22mZXMGEny/N7bDjT
- MD5 SHA1 SHA512 SSDEEP
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Possible privilege escalation attempt
-
Modifies file permissions
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Disable or Modify System Firewall
1