862013b1ecf3291df3458528f175e329efcf198a6bc36547945b6e09ffa53030 | Triage™

Login
Reports

Overview

overview

8

Static

static

1

payload22.bat

windows10-2004-x64

8

payload22.bat

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
payload22.bat
Size 3KB
Sample260629-tx6rjsbt3p
SHA256 862013b1ecf3291df3458528f175e329efcf198a6bc36547945b6e09ffa53030
MD5 67a6b1d09ab9a0aaea961b80e0e60d8e
SHA1 902d5d6691e74803fa7cacd3d3ec5fc219febc9b
SHA512 b7b47e0d7080f2ebc5d2f8944552df6aa634249431cc26b4810a90edef3b8579d449a7ec87eba97466456b7ace3bca8f28091f2285919d2668828a64ce61a967
TLSH
T1B57133F7A41B8722DFA0A120D52EB6363631744AE3B05290B05B01DD991F71D83F8DE9
MD5 SHA1 SHA512 TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

payload22.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

21 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

payload22.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  payload22.bat
- Size 3KB
- SHA256 862013b1ecf3291df3458528f175e329efcf198a6bc36547945b6e09ffa53030
- MD5 67a6b1d09ab9a0aaea961b80e0e60d8e
- SHA1 902d5d6691e74803fa7cacd3d3ec5fc219febc9b
- SHA512 b7b47e0d7080f2ebc5d2f8944552df6aa634249431cc26b4810a90edef3b8579d449a7ec87eba97466456b7ace3bca8f28091f2285919d2668828a64ce61a967
- TLSH
  T1B57133F7A41B8722DFA0A120D52EB6363631744AE3B05290B05B01DD991F71D83F8DE9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Disables RegEdit via registry modification
  defense_evasion
- Drops file in Drivers directory
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy