General
- Target gonnableed.bat
- Size 8KB
- Sample260730-mrcsyswbqg
- SHA256 9396ba4ab7745281c804ab7ace895e93e8b7f662ae0c8fe177915b4295070e51
- MD5 3a6a63aaa02bd2e007b3f6458c796f40
- SHA1 e2ebbea7f02322db5150c261599218a9b4175379
- SHA512 e20c194582647a900be34af009a789b7a7f5050cc87d95b2ce775f5a4984d94d803f13a44c0f93e2d61fa9de88853e1574989db88e159cc9b310c1f92942a16e
- SSDEEP 96:kqbN390mfwfimxqlAyYswG7g/GJPWrXgnnnnn0EGXh40ULPNQZJNa8a/b76:dVXmxkwG0OJPWT0qJ0d/q
- TLSH T15412504872C68421F0BA4F52952D4D47FB1DE0EF93419C28348EC0E67F26B990ABB9E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
gonnableed.bat
Resource
win10v2004-20260513-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
gonnableed.bat
Resource
win11ltsc2024-20260709-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target gonnableed.bat
- Size 8KB
- SHA256 9396ba4ab7745281c804ab7ace895e93e8b7f662ae0c8fe177915b4295070e51
- MD5 3a6a63aaa02bd2e007b3f6458c796f40
- SHA1 e2ebbea7f02322db5150c261599218a9b4175379
- SHA512 e20c194582647a900be34af009a789b7a7f5050cc87d95b2ce775f5a4984d94d803f13a44c0f93e2d61fa9de88853e1574989db88e159cc9b310c1f92942a16e
- SSDEEP 96:kqbN390mfwfimxqlAyYswG7g/GJPWrXgnnnnn0EGXh40ULPNQZJNa8a/b76:dVXmxkwG0OJPWT0qJ0d/q
- TLSH T15412504872C68421F0BA4F52952D4D47FB1DE0EF93419C28348EC0E67F26B990ABB9E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.