General
-
Target
main.bat
-
Size
315B
-
Sample
241117-qfed7a1bqj
-
MD5
547afbea15fbff7354413bcb86ffa918
-
SHA1
be801b8244983779c052032eadc1a965c481c746
-
SHA256
0df1725c27537211f60d8b746115c3e21aa730294604f99f1dce1eedd33dec05
-
SHA512
c66f7a1d542267e1eb08e35dfc0be4dc4cf69ab72eb9dbe2666f7a5cb3c38872028d222122682e4aebe13af36c06e4388c6b2932a278a7d4215eadc650232524
Static task
static1
Behavioral task
behavioral1
Sample
main.bat
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
main.bat
-
Size
315B
-
MD5
547afbea15fbff7354413bcb86ffa918
-
SHA1
be801b8244983779c052032eadc1a965c481c746
-
SHA256
0df1725c27537211f60d8b746115c3e21aa730294604f99f1dce1eedd33dec05
-
SHA512
c66f7a1d542267e1eb08e35dfc0be4dc4cf69ab72eb9dbe2666f7a5cb3c38872028d222122682e4aebe13af36c06e4388c6b2932a278a7d4215eadc650232524
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1