General
- Target nightmare.bat
- Size 4KB
- Sample260724-la335sbm3v
- SHA256 8cb390b38d6fbc508f462ead6cff1853678f5fd3dfe673bbbd088f360b87c147
- MD5 015b87cd589a7b9067806551bcc2803a
- SHA1 35f9275bbd7a359e89c04071a6f8e5b7d0e99bca
- SHA512 040f27e2d3233f819fb2536b5e4757db10ccc671ab178581b2e66e839c18abe680bd493978b68dd855339012a7270f1e3a3c05ee4d343bdea5321845d205b2ea
- SSDEEP 96:bKzaOzn0sGz282BKpPetJ3GYDMVmB/KAOYXTDYKQQizqZXecEkU:/66zx2BKpPetJ3GYDMVmBiAvXTDZ9izL
- TLSH T1F191721A3C665D6585A262E10ABB5860FB50628F49027FE1B4CB20FCB4473C1B77CCEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nightmare.bat
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
nightmare.bat
Resource
win11ltsc2024-20260709-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target nightmare.bat
- Size 4KB
- SHA256 8cb390b38d6fbc508f462ead6cff1853678f5fd3dfe673bbbd088f360b87c147
- MD5 015b87cd589a7b9067806551bcc2803a
- SHA1 35f9275bbd7a359e89c04071a6f8e5b7d0e99bca
- SHA512 040f27e2d3233f819fb2536b5e4757db10ccc671ab178581b2e66e839c18abe680bd493978b68dd855339012a7270f1e3a3c05ee4d343bdea5321845d205b2ea
- SSDEEP 96:bKzaOzn0sGz282BKpPetJ3GYDMVmB/KAOYXTDYKQQizqZXecEkU:/66zx2BKpPetJ3GYDMVmBiAvXTDZ9izL
- TLSH T1F191721A3C665D6585A262E10ABB5860FB50628F49027FE1B4CB20FCB4473C1B77CCEE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1