General
- Target 31072026_1653_86H9Vbl2n.bat.zip
- Size 1.3MB
- Sample260731-vecanadf26
- SHA256 8497b223adf3aca7be2c94f138a284cfeb05e9082911b9ee7165fa899f4c220f
- MD5 07663007bdae7d6bbf4fbc7f39ade4e0
- SHA1 9bb3af12ba400668c68c1364f26f9b007ab49a43
- SHA512 ec5463461d9993653413ceb047e3e9adf136f76bf6d4efb322704900a094ec6d0e2b178633f9a2504c347c230aa48dc63ce3a02e307a3e99ef2f69b361380d55
- SSDEEP 24576:muL/NqsmCZmyd5aaxWvc7jYEkAiPNVW5OhymvZykg9fnkn1EHxPA0RvJwD:m9ECvcoEkAiPjW5O3RLSKEHxPnvJe
- TLSH T1C9553361A7209F7E06436E77B4D787995F4FE18D7AC3A3F28D98F27B2441C896281881
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
86H9Vbl2n.bat
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target 86H9Vbl2n.bat
- Size 9.6MB
- SHA256 4169e1ccdebb74433baa7b9962c6314275e20392359b0f6caa83c36513464d32
- MD5 ddf5bc418321e99f99f17728adf5b681
- SHA1 521979f47b0d4600d8aaa5d70f1a3d76d064dde9
- SHA512 572628dc2ec392a3f7c583cf1611419c2fdbacba9a03c376cbffc30a08b7dc2c67df94180a8e892f667b63c248cc9f8012e1760add1a79a4b142de79f2098b06
- SSDEEP 24576:9LWEOt4AjNzXNq3cjga0ySy2apgCt5yGihklPQTuevLB89C7yu8e62zb3TsOF463:9LFoJd/0yB2OxihWPTCLB6u3rzbT7SZY
- TLSH T11FA633C3B3C6477D46A042C4700BA696E22394A4701E4A7F8CDE717828DB5AD4777AFE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger