General
- Target yo.bat
- Size 890B
- Sample260712-nq4eysay81
- SHA256 34b48775afef7bda8ffdff930f367e935a9a0c64741b7efc3e2e2883980826b0
- MD5 dc8b8e7db2d26bb949ee281a78ccc3f5
- SHA1 250bedc9e5bd720fde2647807a98cb15fa57e873
- SHA512 aefbd3a6570c729b94801f7c896466c7564296849cbc6560d6f12a52dd48ffca213dcb9c08683896f4b5129b693410eb0d366691ccdf3a1e71fed6e6233922e9
- TLSH T11D11492E7C1590494EE50CD90D393361F04250AB4F555EC1B6A6A47D2D07FD6B274149
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
yo.bat
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
yo.bat
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target yo.bat
- Size 890B
- SHA256 34b48775afef7bda8ffdff930f367e935a9a0c64741b7efc3e2e2883980826b0
- MD5 dc8b8e7db2d26bb949ee281a78ccc3f5
- SHA1 250bedc9e5bd720fde2647807a98cb15fa57e873
- SHA512 aefbd3a6570c729b94801f7c896466c7564296849cbc6560d6f12a52dd48ffca213dcb9c08683896f4b5129b693410eb0d366691ccdf3a1e71fed6e6233922e9
- TLSH T11D11492E7C1590494EE50CD90D393361F04250AB4F555EC1B6A6A47D2D07FD6B274149
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.