General
- Target Install_New_theme.bat
- Size 609B
- Sample260705-tc1d2adv7w
- SHA256 7f60a4179212c4b85d3af563987f047c7d416621803e5d2187cbcdfe8bca34b1
- MD5 848abf2f8f70e00ff045c46d519f9e18
- SHA1 47d99f3b9de5d64499b94465a1a59a9df00f174f
- SHA512 ec46fc2a3c39725f9b966bd892eed702e1f59550a6a3a48fa6e6bd6b8b45aa04f1096e80cfb2896718a18b3a45280fb1ec4db85cf3276d26c50dd216ea3605cb
- TLSH T189F008B3E18E1BA91C4B44F561165A5801CF5585D755D05E13F74A545DC12CC4654340
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Install_New_theme.bat
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Install_New_theme.bat
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Install_New_theme.bat
- Size 609B
- SHA256 7f60a4179212c4b85d3af563987f047c7d416621803e5d2187cbcdfe8bca34b1
- MD5 848abf2f8f70e00ff045c46d519f9e18
- SHA1 47d99f3b9de5d64499b94465a1a59a9df00f174f
- SHA512 ec46fc2a3c39725f9b966bd892eed702e1f59550a6a3a48fa6e6bd6b8b45aa04f1096e80cfb2896718a18b3a45280fb1ec4db85cf3276d26c50dd216ea3605cb
- TLSH T189F008B3E18E1BA91C4B44F561165A5801CF5585D755D05E13F74A545DC12CC4654340
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.