General
- Target deepseek_batch_20260416_cb0f13.bat
- Size 10KB
- Sample260416-s2rmragv2z
- SHA256 13706940162f70fa0f06b6db1166ffd0fe15120b2da98c313323cb288199e9c6
- MD5 97ec961ac0781f55539086f8a706adac
- SHA1 95cc436434251d358d07b001f7f7125741f7a636
- SHA512 219eb2b0aa56dfdaab77b50838bfd92ecd8787a4117d36c0b7481ca26ce1aed47d41fa6b6525de3842ccdbd557b2bc4a0a55c7af38564681ab6546a787ea3917
- SSDEEP 192:jkFzs6FR51v1ZBJ2E9lwt8Fa5+/8Z+hK7t9Y4dl4d9HzGdmJvuZQES2KreF:jszs6Fpv1ZBgglpFaw/8Z+hK7HY4TYHy
- TLSH T14F220A227C269D298462D861DCE7DB23FB3562876111BF90B0C670A9A0673C5433FBDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
deepseek_batch_20260416_cb0f13.bat
Resource
win10v2004-20260130-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target deepseek_batch_20260416_cb0f13.bat
- Size 10KB
- SHA256 13706940162f70fa0f06b6db1166ffd0fe15120b2da98c313323cb288199e9c6
- MD5 97ec961ac0781f55539086f8a706adac
- SHA1 95cc436434251d358d07b001f7f7125741f7a636
- SHA512 219eb2b0aa56dfdaab77b50838bfd92ecd8787a4117d36c0b7481ca26ce1aed47d41fa6b6525de3842ccdbd557b2bc4a0a55c7af38564681ab6546a787ea3917
- SSDEEP 192:jkFzs6FR51v1ZBJ2E9lwt8Fa5+/8Z+hK7t9Y4dl4d9HzGdmJvuZQES2KreF:jszs6Fpv1ZBgglpFaw/8Z+hK7HY4TYHy
- TLSH T14F220A227C269D298462D861DCE7DB23FB3562876111BF90B0C670A9A0673C5433FBDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Possible privilege escalation attempt
-
Disables service(s)
-
Drops startup file
-
Modifies file permissions
-
Stops running service(s)
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
2Service Execution
2Windows Management Instrumentation
1Persistence
Create or Modify System Process
6Windows Service
6Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Create or Modify System Process
6Windows Service
6Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1