General
- Target SmartDefender.bat
- Size 3KB
- Sample260716-wlcenset8s
- SHA256 0bc183612ed3fafadea0b92dc41f445937970ce103026924a24e9a0e0ac47a65
- MD5 0dd9b2f13894be662ef6770ec82f5c5f
- SHA1 7f06e3413f9567234994a84d56e6dd460a2c4d1c
- SHA512 054d9d260d3e9cc4012b758d48b24d12ecea011c925e38f2838f6281e78a9b5fd69e9b7a23bb50c1a0bfa4d8dd93eec0d7156adca24831647a1071ae28b7413c
- TLSH T1AF6139AF162E900E0DA548B49F1EB781FA5A063BD844B4D0B98DD922DF1F45353F35CA
- MD5 SHA1 SHA512 TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
SmartDefender.bat
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
SmartDefender.bat
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target SmartDefender.bat
- Size 3KB
- SHA256 0bc183612ed3fafadea0b92dc41f445937970ce103026924a24e9a0e0ac47a65
- MD5 0dd9b2f13894be662ef6770ec82f5c5f
- SHA1 7f06e3413f9567234994a84d56e6dd460a2c4d1c
- SHA512 054d9d260d3e9cc4012b758d48b24d12ecea011c925e38f2838f6281e78a9b5fd69e9b7a23bb50c1a0bfa4d8dd93eec0d7156adca24831647a1071ae28b7413c
- TLSH T1AF6139AF162E900E0DA548B49F1EB781FA5A063BD844B4D0B98DD922DF1F45353F35CA
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory