General
- Target clickfix_raw_user_input.bat
- Size 112B
- Sample260608-xd4dvsdz7s
- SHA256 dff01c4e73e07766ce0d4029dd7078f591251a4ff39395135864ef9e149632c2
- MD5 3e8ddef5da335db7b663f26115a3f217
- SHA1 e34e438e7c659442cb63af87dddebfaf9cec060e
- SHA512 4e08224e8bd4ebc67565f30296fc32505dbfc3f30040eee2a91bb776655acf5182fef78e444c1313460e382aaed14f7b22d00556de5f4b9a5e806d20f74b6eb0
- TLSH T108B09264568EA9104216CEE650F384D5BA4F828290E2E9AA90A120D89838178280E19A
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
clickfix_raw_user_input.bat
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
clickfix_raw_user_input.bat
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target clickfix_raw_user_input.bat
- Size 112B
- SHA256 dff01c4e73e07766ce0d4029dd7078f591251a4ff39395135864ef9e149632c2
- MD5 3e8ddef5da335db7b663f26115a3f217
- SHA1 e34e438e7c659442cb63af87dddebfaf9cec060e
- SHA512 4e08224e8bd4ebc67565f30296fc32505dbfc3f30040eee2a91bb776655acf5182fef78e444c1313460e382aaed14f7b22d00556de5f4b9a5e806d20f74b6eb0
- TLSH T108B09264568EA9104216CEE650F384D5BA4F828290E2E9AA90A120D89838178280E19A
- MD5 SHA1 SHA512 TLSH
Score8/10Indicator Removal: Network Share Connection Removal
Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.