General
- Target VortexVr.bat
- Size 4KB
- Sample260803-jdb3qadr9w
- SHA256 a554c110bab52ac5fcde20560ff39722b22ccd50be261eae20ed50b5aa01a26a
- MD5 271c14f761955625e91034e0956ea3b8
- SHA1 8f5415f443b629b51922eddb6c0054446478d531
- SHA512 8ec41a549cbf2f5de7424473563a65fda786da4ba13236cbb05c941444960ec5dcb8683f87964d7a9b612f56c0fdd95fd49e33042652c0b695bfe6550f68b8c2
- SSDEEP 96:fbC3IDAY/lJ/4DkuhuLhiDQvDs2WpcaDd7uLBpz/ejpz/ezbZJ:fcIDgDkIdDSDsDp5DdIMqf
- TLSH T1A2A1FD05B3C5A246CAFE96E58DD37545E24BB9320488CC45F04FA0C72BFDA8B71AAC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VortexVr.bat
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target VortexVr.bat
- Size 4KB
- SHA256 a554c110bab52ac5fcde20560ff39722b22ccd50be261eae20ed50b5aa01a26a
- MD5 271c14f761955625e91034e0956ea3b8
- SHA1 8f5415f443b629b51922eddb6c0054446478d531
- SHA512 8ec41a549cbf2f5de7424473563a65fda786da4ba13236cbb05c941444960ec5dcb8683f87964d7a9b612f56c0fdd95fd49e33042652c0b695bfe6550f68b8c2
- SSDEEP 96:fbC3IDAY/lJ/4DkuhuLhiDQvDs2WpcaDd7uLBpz/ejpz/ezbZJ:fcIDgDkIdDSDsDp5DdIMqf
- TLSH T1A2A1FD05B3C5A246CAFE96E58DD37545E24BB9320488CC45F04FA0C72BFDA8B71AAC56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.