General

  • Target

    new.bat

  • Size

    15.0MB

  • Sample

    241113-klfljs1ram

  • MD5

    09425a7b32c954a7c9f57aeb687bd4db

  • SHA1

    9ca54b261757325a7e7b675d8fbc3f148c1da12c

  • SHA256

    b4023cfe4d4949ec73303edee321434e2586f0a6d3435d0cc306e0dc7075a8c5

  • SHA512

    fa07e49e079667950527b509b8ec5b023ecb849d6537044cad140ccb0570d6b0d633864183111062306167fd01bc55d5a0041e4a23134ae50194c0fcbc58b441

  • SSDEEP

    192:N4V1WVUQ5kY/Bjwdy8cdyGQenejPVuz0U96ys+b0M4CNEP2K1yL36b+w1tttROty:NKDGe+RHk

Score
8/10

Malware Config

Targets

    • Target

      new.bat

    • Size

      15.0MB

    • MD5

      09425a7b32c954a7c9f57aeb687bd4db

    • SHA1

      9ca54b261757325a7e7b675d8fbc3f148c1da12c

    • SHA256

      b4023cfe4d4949ec73303edee321434e2586f0a6d3435d0cc306e0dc7075a8c5

    • SHA512

      fa07e49e079667950527b509b8ec5b023ecb849d6537044cad140ccb0570d6b0d633864183111062306167fd01bc55d5a0041e4a23134ae50194c0fcbc58b441

    • SSDEEP

      192:N4V1WVUQ5kY/Bjwdy8cdyGQenejPVuz0U96ys+b0M4CNEP2K1yL36b+w1tttROty:NKDGe+RHk

    Score
    8/10
    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks