General
- Target original.bat
- Size 7KB
- Sample260415-tlkpyads7k
- SHA256 cd9a479845bbed28e96035224749f0a194620373bcecad774149bc6cd005c9d3
- MD5 69f4f083fceee82e0fc091aa3ca1067c
- SHA1 fbb66192ad62d6411ad9750b10f59650bcc687b1
- SHA512 b00574334c8203846b26e96fa3786991e4a961c0f2dae8c090a0404567a4c1e01cb46d149dceebb74950dc889904003d9fbb1190af2ec6c9f2ad9d218a8887ea
- SSDEEP 192:Ak2gVt+Tyn89Wz4aQD/DjMAaHN7BHiISGWvr1TxT:AaTuy89Wz4zD/DjMA8XiISGWvrXT
- TLSH T160F12A227D0A0A398557D8358CF39B3AF71162C78111BE90B5C66069A0AF9DC63BF7CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
original.bat
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
original.bat
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target original.bat
- Size 7KB
- SHA256 cd9a479845bbed28e96035224749f0a194620373bcecad774149bc6cd005c9d3
- MD5 69f4f083fceee82e0fc091aa3ca1067c
- SHA1 fbb66192ad62d6411ad9750b10f59650bcc687b1
- SHA512 b00574334c8203846b26e96fa3786991e4a961c0f2dae8c090a0404567a4c1e01cb46d149dceebb74950dc889904003d9fbb1190af2ec6c9f2ad9d218a8887ea
- SSDEEP 192:Ak2gVt+Tyn89Wz4aQD/DjMAaHN7BHiISGWvr1TxT:AaTuy89Wz4zD/DjMA8XiISGWvrXT
- TLSH T160F12A227D0A0A398557D8358CF39B3AF71162C78111BE90B5C66069A0AF9DC63BF7CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Disables Task Manager via registry modification
-
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
-
Disables service(s)
-
Drops startup file
-
Stops running service(s)