General
- Target вц.bat
- Size 1001B
- Sample260624-1146fsf12m
- SHA256 b80299003444cc1796b659fdca76adfa5954d43897cec8d6f48e4579f46dcbf8
- MD5 b95b0ac41ea486ed9f42672e3c1f4172
- SHA1 135fa4180d8b91b43d821a7ff7602a46a97956e1
- SHA512 4250f7bbbd824326ce6e36b9741bc619a6907a7b635185eda298c95634d1e03bd5b9cd1154a47b968b2c2b29fc4318028072fba42e51bb1dc2ed8c4f853ac684
- TLSH T169118C1A2F16DE24C14990E0E9DAA102A13BD2970C24BBE0B0C3B034F519218C3F7FDD
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
вц.bat
Resource
win10ltsc2021-20260513-en
8 signatures
30 seconds
Malware Config
Targets
-
- Target вц.bat
- Size 1001B
- SHA256 b80299003444cc1796b659fdca76adfa5954d43897cec8d6f48e4579f46dcbf8
- MD5 b95b0ac41ea486ed9f42672e3c1f4172
- SHA1 135fa4180d8b91b43d821a7ff7602a46a97956e1
- SHA512 4250f7bbbd824326ce6e36b9741bc619a6907a7b635185eda298c95634d1e03bd5b9cd1154a47b968b2c2b29fc4318028072fba42e51bb1dc2ed8c4f853ac684
- TLSH T169118C1A2F16DE24C14990E0E9DAA102A13BD2970C24BBE0B0C3B034F519218C3F7FDD
- MD5 SHA1 SHA512 TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit