General

  • Target
    deepseek_batch_20260504_e656a9.bat
  • Size 3KB
  • Sample260504-sec6vaet4t
  • SHA256 5ef3bae0daf86c0659cb5ceba585257a7be933982f967465acf30f5594740e73
  • MD5 SHA1 SHA512 TLSH

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://webhook.site/15ec984d-1c33-4058-9782-032429a9e4cf

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://webhook.site/15ec984d-1c33-4058-9782-032429a9e4cf

Targets

    • Target
      deepseek_batch_20260504_e656a9.bat
    • Size 3KB
    • SHA256 5ef3bae0daf86c0659cb5ceba585257a7be933982f967465acf30f5594740e73
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v16

Tasks