General
- Target deepseek_batch_20260430_f41b13 (3).bat
- Size 41KB
- Sample260430-xt2vzag13s
- SHA256 c6605aea0cdd14e574665cc7bce4305c00d9e9a1280d4e8e1dd909f09e635b4a
Score
9/10
Malware Config
Targets
-
- Target deepseek_batch_20260430_f41b13 (3).bat
- Size 41KB
- SHA256 c6605aea0cdd14e574665cc7bce4305c00d9e9a1280d4e8e1dd909f09e635b4a
Score9/10-
Clears Windows event logs
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Disables Task Manager via registry modification
-
Event Triggered Execution: Image File Execution Options Injection
-
Modifies Windows Firewall
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
2Windows Management Instrumentation
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2Accessibility Features
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2Accessibility Features
1Image File Execution Options Injection
1Defense Evasion
Direct Volume Access
1File and Directory Permissions Modification
1Hide Artifacts
1Ignore Process Interrupts
1Impair Defenses
1Disable or Modify System Firewall
1Indicator Removal
3Clear Windows Event Logs
1File Deletion
2