General
- Target _.exe
- Size 4KB
- Sample260625-tvbhmads9w
- SHA256 cb0f30039a5b258fb45afd5802a54aaa381eeb8782ca070f88e807f0b264b670
- MD5 82cd3a73fdbbfdeaba3af0dd977f3c0b
- SHA1 6302c5954be604b8709899f833cdf16588f93260
- SHA512 8bbc03a37749190871436b595d2bf85301ee74e323a0b6355f7eb085fbf922506b70a4d2cd0bfd7c5304394f111c2b9456a2866e59f4b8f6325bd9ae76131209
- SSDEEP 96:YTpKD4QI8SfdVZ8YE9vFV8kDSZx2VEpweuvLaW:Y0D4QI1rcPaW
- TLSH T16891342129058263D7607470E85F1553F7BAF38B2C15EFB0799330A5AC3B1819A7D6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
_.bat
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
_.bat
Resource
win11ltsc2024-20260617-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target _.exe
- Size 4KB
- SHA256 cb0f30039a5b258fb45afd5802a54aaa381eeb8782ca070f88e807f0b264b670
- MD5 82cd3a73fdbbfdeaba3af0dd977f3c0b
- SHA1 6302c5954be604b8709899f833cdf16588f93260
- SHA512 8bbc03a37749190871436b595d2bf85301ee74e323a0b6355f7eb085fbf922506b70a4d2cd0bfd7c5304394f111c2b9456a2866e59f4b8f6325bd9ae76131209
- SSDEEP 96:YTpKD4QI8SfdVZ8YE9vFV8kDSZx2VEpweuvLaW:Y0D4QI1rcPaW
- TLSH T16891342129058263D7607470E85F1553F7BAF38B2C15EFB0799330A5AC3B1819A7D6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Disables RegEdit via registry modification
-
Modifies file permissions
-
Drops file in System32 directory