9c32b8361c9696e6aaf75fa65dd1e916d0ffa982e9e28f7252e732625a7e4d4b | Triage™

Login
Reports

Overview

overview

Static

static

1

b67e97fc_.bat

windows10-2004-x64

b67e97fc_.bat

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
b67e97fc_.bat
Size 867B
Sample260624-2jkadsf16s
SHA256 9c32b8361c9696e6aaf75fa65dd1e916d0ffa982e9e28f7252e732625a7e4d4b
MD5 2b950dd729b5f2056fdd44a0b937cd51
SHA1 be2a61676459f4d8f9b89a8766548fdd9ecedd77
SHA512 e405f1a4dd64981ad01d4ad47f275e3099200a4bb9892f5cc82ab7d103c97320340f57d32f8a9088a095763a3f53b1701e4e0ece0b5847c922cdaab57d4e8184
TLSH
T11911A30115478722E662E4E0D5062543F36BF24B5831AD60B15370B8AD7D188CAFEBED
MD5 SHA1 SHA512 TLSH

Score

10^/10

defense_evasion evasion execution impact persistence ransomware

Static task

static1

Behavioral task

behavioral1

Sample

b67e97fc_.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion evasion execution impact persistence ransomware

Behavioral task

behavioral2

Sample

b67e97fc_.bat

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion evasion execution impact persistence ransomware

Malware Config

Targets

- Target
  b67e97fc_.bat
- Size 867B
- SHA256 9c32b8361c9696e6aaf75fa65dd1e916d0ffa982e9e28f7252e732625a7e4d4b
- MD5 2b950dd729b5f2056fdd44a0b937cd51
- SHA1 be2a61676459f4d8f9b89a8766548fdd9ecedd77
- SHA512 e405f1a4dd64981ad01d4ad47f275e3099200a4bb9892f5cc82ab7d103c97320340f57d32f8a9088a095763a3f53b1701e4e0ece0b5847c922cdaab57d4e8184
- TLSH
  T11911A30115478722E662E4E0D5062543F36BF24B5831AD60B15370B8AD7D188CAFEBED
- MD5 SHA1 SHA512 TLSH
Score

10^/10

defense_evasion evasion execution impact persistence ransomware
- Modifies WinLogon for persistence
  persistence
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Disables Task Manager via registry modification
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasionevasionexecutionimpactpersistenceransomware

behavioral2

defense_evasionevasionexecutionimpactpersistenceransomware

© 2018-2026

Terms | Privacy