Overview

overview

9

Static

static

1

L.bat

windows10-2004-x64

9

L.bat

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    L.bat
  • Size 511B
  • Sample260719-pd42dsds81
  • SHA256 56c5e9ecaa56ffb3bd60fce5ad2a79e38b9e43587bd626157d38e78711d5b202
  • MD5 SHA1 SHA512 TLSH
Score
9/10
discoveryexecutionlateral_movementpersistence

Malware Config

Targets

    • Target
      L.bat
    • Size 511B
    • SHA256 56c5e9ecaa56ffb3bd60fce5ad2a79e38b9e43587bd626157d38e78711d5b202
    • MD5 SHA1 SHA512 TLSH
    Score
    9/10
    discoveryexecutionlateral_movementpersistence

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Remote Service Session Hijacking: RDP Hijacking

      Adversaries may hijack a legitimate user's remote desktop session to move laterally within an environment.

      lateral_movement

    • Password Policy Discovery

      Attempt to access detailed information about the password policy used within an enterprise network.

      discovery

    • Creates a new local user account

      Uses net.exe to create a new local user account, often for persistence or a backdoor account.

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks