General
- Target nettt.bat
- Size 1KB
- Sample260626-wsavesdz2q
- SHA256 f801da45bc7d36c3a81b7a23ec4ed85dea9e95b82cf2a75effb0194ea5d05b52
- MD5 61abe5b274a31c313f2e4f86e91a3609
- SHA1 4d519f33eb6ad3bb3979624d6f3e5b36381fb7d4
- SHA512 0827c63843c095bb2c837e8c696f5c37076d5ca21f7913b352461c8d7b6e6c76cde6ad4e553c170a2b2c0538bc318da95c90ef184cb184fd0e4a11af0e0a667f
- TLSH T1C831DF46402E4D2FC3B5557ADEE235856687C063C85C5DCA799DC7082F7216B1B22FCA
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
nettt.bat
Resource
win10v2004-20260513-en
5 signatures
30 seconds
Behavioral task
behavioral2
Sample
nettt.bat
Resource
win11ltsc2024-20260617-en
5 signatures
30 seconds
Malware Config
Targets
-
- Target nettt.bat
- Size 1KB
- SHA256 f801da45bc7d36c3a81b7a23ec4ed85dea9e95b82cf2a75effb0194ea5d05b52
- MD5 61abe5b274a31c313f2e4f86e91a3609
- SHA1 4d519f33eb6ad3bb3979624d6f3e5b36381fb7d4
- SHA512 0827c63843c095bb2c837e8c696f5c37076d5ca21f7913b352461c8d7b6e6c76cde6ad4e553c170a2b2c0538bc318da95c90ef184cb184fd0e4a11af0e0a667f
- TLSH T1C831DF46402E4D2FC3B5557ADEE235856687C063C85C5DCA799DC7082F7216B1B22FCA
- MD5 SHA1 SHA512 TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.