Overview
overview
8Static
static
1PK FR [[PT...et.zip
windows10-2004-x64
1PK FR [[PT...et.zip
windows11-ltsc_2024-x64
1Baixado em...et.txt
windows10-2004-x64
1Baixado em...et.txt
windows11-ltsc_2024-x64
1PK FR [[PT-BR].gba
windows10-2004-x64
3PK FR [[PT-BR].gba
windows11-ltsc_2024-x64
8sobre tradução.txt
windows10-2004-x64
1sobre tradução.txt
windows11-ltsc_2024-x64
8General
- Target PK FR [[PT-BR]_pokebat.net.zip
- Size 5.1MB
- Sample260628-1xtwbafy7k
- SHA256 3eabf6592509c514c6f3863ed12f2d439a5a0b285cf21e744be652b544d9893d
- MD5 7ee02958027fab445fc5a70182714ffe
- SHA1 10398ddf2e3d4d4ccff36f90ae8fa458db4d43f4
- SHA512 af16036bfeb67178288742805f5db4a7b01b1752273261dbbb63cbc0f06f476df95b3bd53891d2cd835bd0bbb0f2f7205e9f72dc3dc54db9615232bdd6c12301
- SSDEEP 98304:r546Agqyo5cpSuVZTfDR8UczOuRDXo3nR1ot+LLp7eLABmjHtTdogODtYMI:rH27sSO+hr6nD0+x7ecBmjNTa4p
- TLSH T1EE363393088DD041ECE7D6781430AA8D8C5D181BF5257872A7E6C87B80AAFB5FDFD642
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PK FR [[PT-BR]_pokebat.net.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PK FR [[PT-BR]_pokebat.net.zip
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
Baixado em_Downloaded in_-_pokebat.net.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Baixado em_Downloaded in_-_pokebat.net.txt
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
PK FR [[PT-BR].gba
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PK FR [[PT-BR].gba
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
sobre tradução.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
sobre tradução.txt
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target PK FR [[PT-BR]_pokebat.net.zip
- Size 5.1MB
- SHA256 3eabf6592509c514c6f3863ed12f2d439a5a0b285cf21e744be652b544d9893d
- MD5 7ee02958027fab445fc5a70182714ffe
- SHA1 10398ddf2e3d4d4ccff36f90ae8fa458db4d43f4
- SHA512 af16036bfeb67178288742805f5db4a7b01b1752273261dbbb63cbc0f06f476df95b3bd53891d2cd835bd0bbb0f2f7205e9f72dc3dc54db9615232bdd6c12301
- SSDEEP 98304:r546Agqyo5cpSuVZTfDR8UczOuRDXo3nR1ot+LLp7eLABmjHtTdogODtYMI:rH27sSO+hr6nD0+x7ecBmjNTa4p
- TLSH T1EE363393088DD041ECE7D6781430AA8D8C5D181BF5257872A7E6C87B80AAFB5FDFD642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Baixado em_Downloaded in_-_pokebat.net.txt
- Size 116B
- SHA256 e3f9365a7e7a47075d50c2607f95da5677e82cd36de8fc097c14b6afdb4c42e4
- MD5 bd2248c64220268d034153c749091fd3
- SHA1 d55ddc82cdbbc75027f336baf3e61f81090d8236
- SHA512 37c7d71912b51dbcdbc62166e2d9c5a350bbcbfc75af29fb789cf420459ebdb280c6c37177944416d92023895dc53b79830f8934d2a48a139afbc77da594344b
- TLSH T1A8B09285A90280688464948788A06219650DD29AD08281F229AA75AEE22832AEA5FB28
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target PK FR [[PT-BR].gba
- Size 16.0MB
- SHA256 28e084fb5c3f55a5a513a9d28b926e013b76d555480dec1f6e1982e5942379ac
- MD5 4192be43e0c5f16cf1aa125a48a0980c
- SHA1 df0f5a1f21f82a5aa4cd1d58f7d0b2acdad137b9
- SHA512 0dbbe210846e3fb70b9acecdc357146217deda87801c033c46ba2512b45950debf83caeb554a4dc123e66a5d0094e0834048501b70be1533111e55b1a0f1c49f
- SSDEEP 98304:oIdhNlmFKwbdzgxdpZPY9AdyrOWnmm1zTToN6GKK412BNYLB2YgixjRq8:oWNlmFKwh0HPY9KWnmm1TdUixjE8
- TLSH T1CFF6CFC3A910CF67C82BD6384086DFA422A0FC89726A3D9269D5F65E973F1C54D193CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target sobre tradução.txt
- Size 3KB
- SHA256 cbe17291d2cfbb927b3f6e1da3d51df5a3001a08a364f5a8f4e50eaa428b8e9a
- MD5 0f7a5209647c1400a6163e47320fda02
- SHA1 6f4c95e477e3623316d4dc15559f4d4860be343f
- SHA512 b40d00a6dbec9c6b6a9611b7a14a5b0bb38a20893337e570b5607f34c06f6e48d5e9ce4b942a0b61df765649c427797cdb966ae346c0c3070c8ab64991f555a1
- TLSH T15971953A99CF0260086213C26B45EB57E5D953A47A0ECB7775ED4B0532CD584F747E1C
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.