General
- Target ransomwareforeducationpurposes.bat
- Size 3KB
- Sample260604-pabwfaez5m
- SHA256 33ee9b7828e104ffa80fa5bc6a83e9c5abf50526b865c7047bfa99e14a449d04
- MD5 c3ca50fb2400c4d8bd993146c609207e
- SHA1 4ad9f230b970888e98752afa4e6a2a5acdb35c1b
- SHA512 6596d73217cfc27bd07354dd2b2e7036337f2b09a425a30c225c1d04524a1112ef9a4399298b107010008e01de9312ee1a48795feb905af1496b7863ec000cff
- TLSH T1896110413890584406BACA678F7AC045F219918F03040F887C5BDAF12B6A8F5B79FDAA
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ransomwareforeducationpurposes.bat
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target ransomwareforeducationpurposes.bat
- Size 3KB
- SHA256 33ee9b7828e104ffa80fa5bc6a83e9c5abf50526b865c7047bfa99e14a449d04
- MD5 c3ca50fb2400c4d8bd993146c609207e
- SHA1 4ad9f230b970888e98752afa4e6a2a5acdb35c1b
- SHA512 6596d73217cfc27bd07354dd2b2e7036337f2b09a425a30c225c1d04524a1112ef9a4399298b107010008e01de9312ee1a48795feb905af1496b7863ec000cff
- TLSH T1896110413890584406BACA678F7AC045F219918F03040F887C5BDAF12B6A8F5B79FDAA
- MD5 SHA1 SHA512 TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1