General
- Target ядерка.bat
- Size 1KB
- Sample260624-2ncfcags3q
- SHA256 148a2ce242efd27ab64675276fbbf76947a96c1f0cac11c0a8717465cca9ce7d
- MD5 c140901bdef181ebed837e215fb27127
- SHA1 7af8c0b63a8c40ea25aa58b6d47e568eeec077c4
- SHA512 527d0a446c7a4940f01d9dce391481a32d20505c94ed3e971613922c27a1da60fe58b74fcdeee673891b2129150b9b118ea19a9c567cf4df3ef9d71c92ba1699
- TLSH T1A711E2011943C622D962ECF0C54B6603F26BF14B5820A970B15370A8DD6D159CEBAFFD
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ядерка.bat
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ядерка.bat
- Size 1KB
- SHA256 148a2ce242efd27ab64675276fbbf76947a96c1f0cac11c0a8717465cca9ce7d
- MD5 c140901bdef181ebed837e215fb27127
- SHA1 7af8c0b63a8c40ea25aa58b6d47e568eeec077c4
- SHA512 527d0a446c7a4940f01d9dce391481a32d20505c94ed3e971613922c27a1da60fe58b74fcdeee673891b2129150b9b118ea19a9c567cf4df3ef9d71c92ba1699
- TLSH T1A711E2011943C622D962ECF0C54B6603F26BF14B5820A970B15370A8DD6D159CEBAFFD
- MD5 SHA1 SHA512 TLSH
-
Modifies WinLogon for persistence
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Disables Task Manager via registry modification
-
Modifies file permissions