General
- Target Новый текстовый документ.bat
- Size 958B
- Sample260624-13wl4af13p
- SHA256 7349fe447ff0f0c4ce1c675a54e21646aa5847cfe1a0433bc976dfa0b8a99a05
- MD5 8a02292ec0ef181bdb963a46a6b993c3
- SHA1 5dd2d480ebf5923f522acbb4ad21e678fcd5c1a3
- SHA512 56d901c70442a6733dad523231b0f6f0c842ded18bfa9aedc2430d46b27e8d8cd44965e5fb99a0f3fab905b1e96e4992a1b829b74a19336dd0ecf5b10a4b9b7f
- TLSH T17F11381F2A1ADEA8C44864E4E5ABB102A16ED64B0D70BBD4B0C2B074B559324C3B7BDD
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Новый текстовый документ.bat
Resource
win10ltsc2021-20260513-en
10 signatures
30 seconds
Malware Config
Targets
-
- Target Новый текстовый документ.bat
- Size 958B
- SHA256 7349fe447ff0f0c4ce1c675a54e21646aa5847cfe1a0433bc976dfa0b8a99a05
- MD5 8a02292ec0ef181bdb963a46a6b993c3
- SHA1 5dd2d480ebf5923f522acbb4ad21e678fcd5c1a3
- SHA512 56d901c70442a6733dad523231b0f6f0c842ded18bfa9aedc2430d46b27e8d8cd44965e5fb99a0f3fab905b1e96e4992a1b829b74a19336dd0ecf5b10a4b9b7f
- TLSH T17F11381F2A1ADEA8C44864E4E5ABB102A16ED64B0D70BBD4B0C2B074B559324C3B7BDD
- MD5 SHA1 SHA512 TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Modifies file permissions