General
- Target Activar Windows.bat
- Size 1KB
- Sample260504-bykllaex4n
- SHA256 cd415ea59f8f56f93e5ad2e5742e3b0c96ce8916b1745f79f36c8c442b4fecfd
- MD5 8e6150a4d3cb8af14d302102ca26bf38
- SHA1 1618b6fdeccd909aae3b1789fe7d917d705c02bf
- SHA512 f3ab57ea7a0270fb23890c6f909cd9e579923811fa3e45e42897b5a24293ec5556c148d50729f27516d3950f29491239432831caa2f86fd37d4906d107e69f91
- TLSH T1D1113A1C154B8E21316698A0D3653165E657B397587485D0F0E272809DAC3C9DEA6EBC
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Activar Windows.bat
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Activar Windows.bat
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Activar Windows.bat
- Size 1KB
- SHA256 cd415ea59f8f56f93e5ad2e5742e3b0c96ce8916b1745f79f36c8c442b4fecfd
- MD5 8e6150a4d3cb8af14d302102ca26bf38
- SHA1 1618b6fdeccd909aae3b1789fe7d917d705c02bf
- SHA512 f3ab57ea7a0270fb23890c6f909cd9e579923811fa3e45e42897b5a24293ec5556c148d50729f27516d3950f29491239432831caa2f86fd37d4906d107e69f91
- TLSH T1D1113A1C154B8E21316698A0D3653165E657B397587485D0F0E272809DAC3C9DEA6EBC
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks for any installed AV software in registry
-
Drops file in System32 directory