Extracted

Extracted

• • Target
    errrrr.bat
  • Size 2KB
  • SHA256 6754bbeab377a2be32445c68b83783e869d35c1f27760b54f3f0ada00fb1b162
  • MD5 070f3cc1856e5003dfe9d2eb4ade438f
  • SHA1 132409ac05597d627f1cc560294fbc44bf1921eb
  • SHA512 9f73c31f31f2950fa2e57f022c7a203b6571003a48d3825a6eec84a1ea894b6ccdb27460c0b8b07df0b3136e7328151b168a4d898f037f94a9c3e3a3992fb8ef
  • TLSH
    T1275182AB3E0691054B7AC9B3DE1EC899FA3981838110BE4336CCC1BC87D6794537D2E5
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  discoveryexecutionpersistenceprivilege_escalationdefense_evasion

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Drops startup file

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2