General
- Target 105a0ebc_.bat
- Size 1KB
- Sample260625-mfb3aaay8w
- SHA256 80985b1841da3f12661a642e73e6e30cc1f2a7a032ee0947270b79bc647f0e2c
- MD5 b50c5380bc3b1da9f88631aaaa182d74
- SHA1 d417c996e9a47007840745c9c3ce28d042fc5a32
- SHA512 bd120235674cd2ff430886a298957198275efeefc2d8449dab70daab255b74d62c402d7cc1025016660860162bf72a971eca7b34bd2bf377474af9b4af835eed
- TLSH T1ED21AE1129168322D792B570E44F2803F3BBE38B2820AEA075477095587F181C9FD6E6
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
105a0ebc_.bat
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
105a0ebc_.bat
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 105a0ebc_.bat
- Size 1KB
- SHA256 80985b1841da3f12661a642e73e6e30cc1f2a7a032ee0947270b79bc647f0e2c
- MD5 b50c5380bc3b1da9f88631aaaa182d74
- SHA1 d417c996e9a47007840745c9c3ce28d042fc5a32
- SHA512 bd120235674cd2ff430886a298957198275efeefc2d8449dab70daab255b74d62c402d7cc1025016660860162bf72a971eca7b34bd2bf377474af9b4af835eed
- TLSH T1ED21AE1129168322D792B570E44F2803F3BBE38B2820AEA075477095587F181C9FD6E6
- MD5 SHA1 SHA512 TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit