Analysis
- user interaction
yes - max time kernel
1800s - max time network
1416s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/06/2026, 13:01
Static task
static1
Behavioral task
behavioral1
Sample
Boost Bot.bat
Resource
win11ltsc2024-20260617-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
installer.bat
Resource
win11ltsc2024-20260618-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
main.py
Resource
win11ltsc2024-20260618-en
14 signatures
900 seconds
General
- Target installer.bat
- Size 31B
- Sample260627-p9a37aay91
- SHA256 f634394e6be6cb445c6bc8191ae89e2f0de21f2214dc16b9cd2e080ad660b1dc
- MD5 ed479ebacddedec77a46c27cc0e6a94d
- SHA1 7b1855527317d0124ebeb726defa838d54e9b663
- SHA512 41fd6db1b319fceac0d1796b4183cec97e40ddd6ac919cce89bbd531e4e0153e7d607732177359d4e2719170b495cb70cefac806d3c90975cb85eab10bcd8fda
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\installer.bat"1⤵PID:5868
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\DismountStep.cmd" "1⤵PID:6516
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\DismountStep.cmd" "1⤵PID:2488
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\DismountStep.cmd" "1⤵PID:5924
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:7120
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2568
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2384