General
- Target cool.bat
- Size 661B
- Sample260421-211zgagy6w
- SHA256 258e1591a2b8aea6ae26a68c9d6bf426c9f5b54e5762dacfcffb0357561a8d57
- MD5 f937f7e1834eefa446f69daa4cd69f9e
- SHA1 182799685d0ef626b23fb24e3e7b2a57be9ded00
- SHA512 12bb3ed9e933fbaa0380c336fd0450bab83342fd229060c163fcd737c9309aa7f5d9e89dec2bc1b84288ec17d9c6df6a1ba597f60360a142622266dd433387ec
- TLSH T18601F65E4E8C9D2E4DC21F2347883792E814102D72C577F26E64D15D9F0FD62B6A6740
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
cool.bat
Resource
win10v2004-20260130-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
cool.bat
Resource
win11-20260130-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target cool.bat
- Size 661B
- SHA256 258e1591a2b8aea6ae26a68c9d6bf426c9f5b54e5762dacfcffb0357561a8d57
- MD5 f937f7e1834eefa446f69daa4cd69f9e
- SHA1 182799685d0ef626b23fb24e3e7b2a57be9ded00
- SHA512 12bb3ed9e933fbaa0380c336fd0450bab83342fd229060c163fcd737c9309aa7f5d9e89dec2bc1b84288ec17d9c6df6a1ba597f60360a142622266dd433387ec
- TLSH T18601F65E4E8C9D2E4DC21F2347883792E814102D72C577F26E64D15D9F0FD62B6A6740
- MD5 SHA1 SHA512 TLSH
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.