General
- Target Battly-Launcher-Windows.exe
- Size 17.2MB
- Sample260731-gc9aqade96
- SHA256 0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa
- MD5 dc1c0cf4c0e8d8fd4b9119d9b3fc0796
- SHA1 cb5f25073002b224bb62039dab668f14e4aca8ea
- SHA512 5ae5bb6b7150edb190d866a46bee97deb99c0ccaf1a58939d15c5ad643a2efbdecf3610f0b800f1d9775bc64061d337af9697c06950f0521c3634e9b93d4f3e7
- SSDEEP 196608:8irZn74T6LTwKcKngnckbRjVCPEEKnCMu6eawO80Qv5jC0J:887DLTwKcKnRe9QKna6uTT5jC+
- TLSH T17B077C227B9A99ADC05AC47083864B725E3174CB0B35BAFF448496782F6DAF41F3C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Battly-Launcher-Windows.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
Battly-Launcher-Windows.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Battly-Launcher-Windows.exe
- Size 17.2MB
- SHA256 0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa
- MD5 dc1c0cf4c0e8d8fd4b9119d9b3fc0796
- SHA1 cb5f25073002b224bb62039dab668f14e4aca8ea
- SHA512 5ae5bb6b7150edb190d866a46bee97deb99c0ccaf1a58939d15c5ad643a2efbdecf3610f0b800f1d9775bc64061d337af9697c06950f0521c3634e9b93d4f3e7
- SSDEEP 196608:8irZn74T6LTwKcKngnckbRjVCPEEKnCMu6eawO80Qv5jC0J:887DLTwKcKnRe9QKna6uTT5jC+
- TLSH T17B077C227B9A99ADC05AC47083864B725E3174CB0B35BAFF448496782F6DAF41F3C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.