General
- Target MEMZ 2.0.bat
- Size 2KB
- Sample260515-yrbrfaav4j
- SHA256 6a0e4ad370731e9062efa3f91981b027d78073348717fe5dd741938ab3da8834
- MD5 b6660305c1cc36ab71a4ef328fc1dd27
- SHA1 71c827eb9dddb51d39e573dec497d7a059245a40
- SHA512 9d1a9d527eee7fc6e7d419fde95a4b51544e8c4d62baa12103364f4e114b684248018fd5a283f1d06b0def7be38dce939232dfd13df3a7549969e5fa6c129747
- TLSH T13E41A6BB591802980F1E5F86CD903FACE28701CDBEB692E2D8C058B898EFC363519655
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
MEMZ 2.0.bat
Resource
win10ltsc2021-20260513-en
14 signatures
120 seconds
Malware Config
Targets
-
- Target MEMZ 2.0.bat
- Size 2KB
- SHA256 6a0e4ad370731e9062efa3f91981b027d78073348717fe5dd741938ab3da8834
- MD5 b6660305c1cc36ab71a4ef328fc1dd27
- SHA1 71c827eb9dddb51d39e573dec497d7a059245a40
- SHA512 9d1a9d527eee7fc6e7d419fde95a4b51544e8c4d62baa12103364f4e114b684248018fd5a283f1d06b0def7be38dce939232dfd13df3a7549969e5fa6c129747
- TLSH T13E41A6BB591802980F1E5F86CD903FACE28701CDBEB692E2D8C058B898EFC363519655
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Probable phishing domain