General
- Target VortexVr.bat
- Size 6KB
- Sample260803-hs3csa1bkf
- SHA256 26d929ad3dd83ca97ee29e378a344e90b811ebebfef7c4dea13bb4a4076b7c10
- MD5 5d5832ca90a76c9a0645a553e83f18f7
- SHA1 aa336044b0f6270c0d028e21767cafe826aadeb1
- SHA512 c42d4ff661c19ccc7c9e5c294849d76026b600969bd45e3aeec8cce91ed36699576a4fe2b7ebb96e89034bc8ebe5ef066080c786a57973b373c9d221c6de89db
- SSDEEP 96:fbC3IDAY/lJ/4DkuhuLhiDQvDs2WpcaDd7uLBpz/ejpz/exTbf:fcIDgDkIdDSDsDp5DdIMiD
- TLSH T1F3E18705B005B6864AB6D7EDC293A541F24F8D0307888045F48DA4573B39B8B71FF896
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VortexVr.bat
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target VortexVr.bat
- Size 6KB
- SHA256 26d929ad3dd83ca97ee29e378a344e90b811ebebfef7c4dea13bb4a4076b7c10
- MD5 5d5832ca90a76c9a0645a553e83f18f7
- SHA1 aa336044b0f6270c0d028e21767cafe826aadeb1
- SHA512 c42d4ff661c19ccc7c9e5c294849d76026b600969bd45e3aeec8cce91ed36699576a4fe2b7ebb96e89034bc8ebe5ef066080c786a57973b373c9d221c6de89db
- SSDEEP 96:fbC3IDAY/lJ/4DkuhuLhiDQvDs2WpcaDd7uLBpz/ejpz/exTbf:fcIDgDkIdDSDsDp5DdIMiD
- TLSH T1F3E18705B005B6864AB6D7EDC293A541F24F8D0307888045F48DA4573B39B8B71FF896
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1