General
- Target HardwareRape.bat
- Size 3KB
- Sample260718-tp4bfsft9p
- SHA256 30b3fff31bdf0205d23c2c6cf031637668fafb4bfce77e99901d090dd71b62bf
- MD5 ff7e1e9e8e3f4ea14f8a8fc4028d17d5
- SHA1 148350930e001fda8bf2755023e3a64ae8c99291
- SHA512 d4487a83878e92038ab93997ea486553f5d29d4b06bce6aa3d76c4189d5e513f47eef2bb40468dd14dd39168ad47474e2131fcfc74acb349580edf9001df5fff
- TLSH T108717F112D834C5866E8EBC27C6150F7FE2AB38A0B14E948395242D4DD967E2ECCDDEC
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
HardwareRape.bat
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
HardwareRape.bat
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target HardwareRape.bat
- Size 3KB
- SHA256 30b3fff31bdf0205d23c2c6cf031637668fafb4bfce77e99901d090dd71b62bf
- MD5 ff7e1e9e8e3f4ea14f8a8fc4028d17d5
- SHA1 148350930e001fda8bf2755023e3a64ae8c99291
- SHA512 d4487a83878e92038ab93997ea486553f5d29d4b06bce6aa3d76c4189d5e513f47eef2bb40468dd14dd39168ad47474e2131fcfc74acb349580edf9001df5fff
- TLSH T108717F112D834C5866E8EBC27C6150F7FE2AB38A0B14E948395242D4DD967E2ECCDDEC
- MD5 SHA1 SHA512 TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification