General
- Target virus ransomvare dont open.bat
- Size 4KB
- Sample260722-jf7meaxyet
- SHA256 1991d0599f6b3f6e27cb4945761b9928fec33609067f110bb5862540f3ba8791
- MD5 7c073ed6a525fd3ed2150f8c7fae3b66
- SHA1 8173e964a4af0bf76a3b2593809262de1be70ba6
- SHA512 1e4e7546d1cc3c79e01abcb845f65ec87364adb05230de52752155239ea9e9a11f074dcef7a4b8bd01b0c0d2f4872c9fa04e25d75439ad6451fa40580210ecd3
- SSDEEP 96:ZfK0zhHQ5M1qT4K6UETKOTm/jPm5FUbUoyJvJSHN71CWQTKOTm/dj:Zi059qTPEWOa/S5FcyJvJSH/CWQWOa/1
- TLSH T19E91A5267D12980152F8E281893A6581FB9B028B69015FC8B6EEE1781F35781D2BCADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
virus ransomvare dont open.bat
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
virus ransomvare dont open.bat
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target virus ransomvare dont open.bat
- Size 4KB
- SHA256 1991d0599f6b3f6e27cb4945761b9928fec33609067f110bb5862540f3ba8791
- MD5 7c073ed6a525fd3ed2150f8c7fae3b66
- SHA1 8173e964a4af0bf76a3b2593809262de1be70ba6
- SHA512 1e4e7546d1cc3c79e01abcb845f65ec87364adb05230de52752155239ea9e9a11f074dcef7a4b8bd01b0c0d2f4872c9fa04e25d75439ad6451fa40580210ecd3
- SSDEEP 96:ZfK0zhHQ5M1qT4K6UETKOTm/jPm5FUbUoyJvJSHN71CWQTKOTm/dj:Zi059qTPEWOa/S5FcyJvJSH/CWQWOa/1
- TLSH T19E91A5267D12980152F8E281893A6581FB9B028B69015FC8B6EEE1781F35781D2BCADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1