General
- Target Matcha_Setup.bat
- Size 12KB
- Sample260706-eavcnshv5s
- SHA256 34e8530552b1c66cfca7ef676d8db177fc5434b5f3f4267c24ae4d942a8a2669
- MD5 a26b12c14d4bc1ba4aee1de27848a7f5
- SHA1 1465a6c52e6d1b0431a0b8fc913d5183cd0400e9
- SHA512 1a690b968d15a607f39c7a2d347c571cb7f5e159c1060b2c7378d10c7bd2dec00bf845e5447f5be05a46f9f1497c2d62f8e3cfa61a7b4543e51e03c77a329717
- SSDEEP 192:ESFTpw1nPyryTW/wNypcV/TPKlU8tEmm00o2xJhTY:ESFTpw1nW7oopcV/TPpRY
- TLSH T14142A5BBF938CC225682874A8E1682243B1248DF66045E54B0BF9E70078D7D3B7DDEB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Matcha_Setup.bat
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Matcha_Setup.bat
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Matcha_Setup.bat
- Size 12KB
- SHA256 34e8530552b1c66cfca7ef676d8db177fc5434b5f3f4267c24ae4d942a8a2669
- MD5 a26b12c14d4bc1ba4aee1de27848a7f5
- SHA1 1465a6c52e6d1b0431a0b8fc913d5183cd0400e9
- SHA512 1a690b968d15a607f39c7a2d347c571cb7f5e159c1060b2c7378d10c7bd2dec00bf845e5447f5be05a46f9f1497c2d62f8e3cfa61a7b4543e51e03c77a329717
- SSDEEP 192:ESFTpw1nPyryTW/wNypcV/TPKlU8tEmm00o2xJhTY:ESFTpw1nW7oopcV/TPpRY
- TLSH T14142A5BBF938CC225682874A8E1682243B1248DF66045E54B0BF9E70078D7D3B7DDEB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.