Extracted

• • Target
    Fatura-BtgPactual-22568.bat
  • Size 778B
  • SHA256 bc4c29bc0c84ea18311fbadc508f6f3a9d84b54a456e672c2ab34d6b42f56c0c
  • MD5 e3f81120502a2945f3f0eaabc28e6d3f
  • SHA1 3d61499aabdc06152aad1bc03431ba1815f5e566
  • SHA512 2e3f2621eef6278aa31842d263cd2cde863bcdd6f1e9928509cb59c131e1293ee56aed8a8cda82e8f65643954077d51ca4f973771c46c0e54b115ff68f97c160
  • TLSH
    T1920175D245C60908C505809C38D6F580A6CB2D8B908CF08F25FF1D72268F01B3072A7D
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  executiondefense_evasion

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Executes dropped EXE

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion

  • Drops file in System32 directory

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1behavioral2