General
- Target malware.bat
- Size 259B
- Sample260722-rarb8sfe59
- SHA256 a1e8219c6d9ffa971186cff7f192066bf72dbc4212baae1850f40823b1e0196d
- MD5 f50f6428494a514452257abd58a6da00
- SHA1 d8968f5a7e33b2a2d87bf4368339ee0651997c9d
- SHA512 1ba320242a2d6a2e971a3731d91550f9c786512265d6f89c93e072eb046f78ba89b120ce51c2bf9335496f7380a95d99e9cfcb0e9e17bf537380dc1b5d213ae3
- TLSH T1B6D02B9653250436D24F0CA51570D765E8867952E16245B53651E816EF5118CFA35061
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
malware.bat
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
malware.bat
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target malware.bat
- Size 259B
- SHA256 a1e8219c6d9ffa971186cff7f192066bf72dbc4212baae1850f40823b1e0196d
- MD5 f50f6428494a514452257abd58a6da00
- SHA1 d8968f5a7e33b2a2d87bf4368339ee0651997c9d
- SHA512 1ba320242a2d6a2e971a3731d91550f9c786512265d6f89c93e072eb046f78ba89b120ce51c2bf9335496f7380a95d99e9cfcb0e9e17bf537380dc1b5d213ae3
- TLSH T1B6D02B9653250436D24F0CA51570D765E8867952E16245B53651E816EF5118CFA35061
- MD5 SHA1 SHA512 TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.