General
- Target nightmare.bat
- Size 7KB
- Sample260724-leldwsbm8v
- SHA256 a00146d588339fd938875a869f334772be915c62c4b133a0049b63ff938c43a8
- MD5 3212876dcaa30b8c29da4c4c9015d302
- SHA1 387b14ff8bce71b3aa7709539e0c9a2be347a69f
- SHA512 e355393b6b1b1e536bb6a9fae12ebcbf1072599c878fc1e0fcd4e9340ffecd4cda9249d52d1757d9279d8224ac52a377a52f186dca50260342727e8ce14b7bb4
- SSDEEP 192:u66lKx2BV+PeSJHpyHTDdBMxWwRVaAururxS0K0gUgKre9iFFFFFFFFFm8rtt5xB:u66lK4BV+G6JyHTDIVuKrxI8rtt5xugf
- TLSH T180F13E257C0619414B5698A08EFA6F60FA10B34BD8000ED5F98F7A786C5F7D7B2EC6D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nightmare.bat
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
nightmare.bat
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target nightmare.bat
- Size 7KB
- SHA256 a00146d588339fd938875a869f334772be915c62c4b133a0049b63ff938c43a8
- MD5 3212876dcaa30b8c29da4c4c9015d302
- SHA1 387b14ff8bce71b3aa7709539e0c9a2be347a69f
- SHA512 e355393b6b1b1e536bb6a9fae12ebcbf1072599c878fc1e0fcd4e9340ffecd4cda9249d52d1757d9279d8224ac52a377a52f186dca50260342727e8ce14b7bb4
- SSDEEP 192:u66lKx2BV+PeSJHpyHTDdBMxWwRVaAururxS0K0gUgKre9iFFFFFFFFFm8rtt5xB:u66lK4BV+G6JyHTDIVuKrxI8rtt5xugf
- TLSH T180F13E257C0619414B5698A08EFA6F60FA10B34BD8000ED5F98F7A786C5F7D7B2EC6D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1