General
- Target lorem.bat
- Size 101B
- Sample260629-wevyfacx4j
- SHA256 60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6
- MD5 a65482d7932f6977bf302ecfe0cb955e
- SHA1 73bfd6a7bb77a549b9e050ec36cd906dceb218a7
- SHA512 949dddcc136a50803cd91e69f782e42a5854d06eadcc52c6abc41a2a7db555e4202dbe0497bc85aaee0f8c46d69bc3e8f52aa59582ec29cfd72aef2f1d1cf1ad
- TLSH T1EEB01274568FA9104217CFF640F2C491BA4F8242D0E2E9BB90B030C81838038280F18D
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lorem.bat
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
lorem.bat
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target lorem.bat
- Size 101B
- SHA256 60b922a689b52f3d50f1ad23198c75e4e94767ab5d4ad87cf2fc927423ddc1e6
- MD5 a65482d7932f6977bf302ecfe0cb955e
- SHA1 73bfd6a7bb77a549b9e050ec36cd906dceb218a7
- SHA512 949dddcc136a50803cd91e69f782e42a5854d06eadcc52c6abc41a2a7db555e4202dbe0497bc85aaee0f8c46d69bc3e8f52aa59582ec29cfd72aef2f1d1cf1ad
- TLSH T1EEB01274568FA9104217CFF640F2C491BA4F8242D0E2E9BB90B030C81838038280F18D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Indicator Removal: Network Share Connection Removal
Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.