General
- Target badfriend.bat
- Size 923B
- Sample260424-ysbstsbt9n
- SHA256 6ee027a1b72a6c19af3141b036cd2f66eabba79e0f87c85ddbe98ead6d397a44
- MD5 6698309c1b2fa148f2bdc843731a5ff2
- SHA1 c6f852d445bb399d6458a53d2cf1e43398bc6921
- SHA512 526c6c5b37f589ecacffc9558f049845c0ff718b11e8fcf17fd3e2e1d673fa2e949d61f1eab430a997b5604ff220bc73ed2b79f5349bece5bd84f9e6e89554a1
- TLSH T16011043D0C366398017BD669C43C61A4D40551470B26F5513564C8357B71FEDDABA6CF
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
badfriend.bat
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
badfriend.bat
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target badfriend.bat
- Size 923B
- SHA256 6ee027a1b72a6c19af3141b036cd2f66eabba79e0f87c85ddbe98ead6d397a44
- MD5 6698309c1b2fa148f2bdc843731a5ff2
- SHA1 c6f852d445bb399d6458a53d2cf1e43398bc6921
- SHA512 526c6c5b37f589ecacffc9558f049845c0ff718b11e8fcf17fd3e2e1d673fa2e949d61f1eab430a997b5604ff220bc73ed2b79f5349bece5bd84f9e6e89554a1
- TLSH T16011043D0C366398017BD669C43C61A4D40551470B26F5513564C8357B71FEDDABA6CF
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.