General
- Target DBS_confirmation_of_funds_transfer_06_17_202600000000df.bat
- Size 2KB
- Sample260618-ghwxkse17p
- SHA256 d7577f2b26fdcf537bf6551bf5b7e3e0020bb7b4a538ba9c444a49ad09355034
Score
8/10
Malware Config
Targets
-
- Target DBS_confirmation_of_funds_transfer_06_17_202600000000df.bat
- Size 2KB
- SHA256 d7577f2b26fdcf537bf6551bf5b7e3e0020bb7b4a538ba9c444a49ad09355034
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks QEMU agent file
Checks presence of QEMU agent, possibly to detect virtualization.
-
Suspicious use of NtSetInformationThreadHideFromDebugger