General
- Target delete_system32.bat
- Size 164B
- Sample260704-2fgebsav6m
- SHA256 a7315a2111c93e131a1765dc3452c4b81d96fca4680b5b136c280218787f18c2
- MD5 afca3e170d97417a954ac3304460b2de
- SHA1 1ac0d4777d9c531df2d17beba68c7edee3ab00c2
- SHA512 85fd0561c48efc092e7ef0488ca2866d54e00d48f29ca5e03788a44e53a229a63b994531b33cdadad26ea27dee0e675790394be2ab587a5efb32659279aa701a
- TLSH T13BC08CF5176142B0D0194D10844FE282C128F09F2008EA3000DA0198FE8B0228D329EB
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
delete_system32.bat
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
delete_system32.bat
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target delete_system32.bat
- Size 164B
- SHA256 a7315a2111c93e131a1765dc3452c4b81d96fca4680b5b136c280218787f18c2
- MD5 afca3e170d97417a954ac3304460b2de
- SHA1 1ac0d4777d9c531df2d17beba68c7edee3ab00c2
- SHA512 85fd0561c48efc092e7ef0488ca2866d54e00d48f29ca5e03788a44e53a229a63b994531b33cdadad26ea27dee0e675790394be2ab587a5efb32659279aa701a
- TLSH T13BC08CF5176142B0D0194D10844FE282C128F09F2008EA3000DA0198FE8B0228D329EB
- MD5 SHA1 SHA512 TLSH
Score8/10-
Drops file in Drivers directory
-
Possible privilege escalation attempt
-
Modifies file permissions
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Drops file in System32 directory