General
- Target ram.bat
- Size 2KB
- Sample260424-sd1whsd15j
- SHA256 561fdf64fd631258d8a6aaf9e346e20f32ead5041d4d100467b7e8ebe4a0d445
- MD5 5b09a564d0310ec8aa335ffd0d28c168
- SHA1 86f4620a598701a811c0466ae99add97f3c4ed75
- SHA512 b517a96ac638390d2d20935b5549e3ac090a3a949719ae3b025d158980678ed1b26d1f4edeab8a4a1fe6d083d0a0498eb2b673ce41bf37302adc90613ec6a895
- TLSH T1EE41334536DD401407D348BBE402779BFE952B16A261EECE31E0E464CEC617ABA75837
- MD5 SHA1 SHA512 TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
ram.bat
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ram.bat
Resource
win10ltsc2021-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ram.bat
- Size 2KB
- SHA256 561fdf64fd631258d8a6aaf9e346e20f32ead5041d4d100467b7e8ebe4a0d445
- MD5 5b09a564d0310ec8aa335ffd0d28c168
- SHA1 86f4620a598701a811c0466ae99add97f3c4ed75
- SHA512 b517a96ac638390d2d20935b5549e3ac090a3a949719ae3b025d158980678ed1b26d1f4edeab8a4a1fe6d083d0a0498eb2b673ce41bf37302adc90613ec6a895
- TLSH T1EE41334536DD401407D348BBE402779BFE952B16A261EECE31E0E464CEC617ABA75837
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.