General
- Target VortexVr.bat
- Size 4KB
- Sample260803-jf2fds1eqb
- SHA256 a85f890c291675d2a6352c6068b290d4cc70d82d0f817c5662d83ef6f4f136b5
- MD5 8396d14360af4a30a65a63132451389a
- SHA1 a3ab710defbe41b02aff782b958b2f14dcb72dbe
- SHA512 677951d3eac5bc2e24eee913f8f7096e2c03ccbd0b721b9d8d98d191bd976d971e5e2714863d524ea5e8d9fd01baa941f36e32c63470a32986b3e5d1d8944553
- SSDEEP 96:fbC3IDAY/lJ/4DkuhuLhiDQvDs2WpcaDd7uLBpz/ejpz/eWvbhJ:fcIDgDkIdDSDsDp5DdIMpvn
- TLSH T1DBB1EB05B3C5A646C6FE96E98DD37501E24B793206C4CC45F04FA0C727FDA8B71AAC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VortexVr.bat
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
VortexVr.bat
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target VortexVr.bat
- Size 4KB
- SHA256 a85f890c291675d2a6352c6068b290d4cc70d82d0f817c5662d83ef6f4f136b5
- MD5 8396d14360af4a30a65a63132451389a
- SHA1 a3ab710defbe41b02aff782b958b2f14dcb72dbe
- SHA512 677951d3eac5bc2e24eee913f8f7096e2c03ccbd0b721b9d8d98d191bd976d971e5e2714863d524ea5e8d9fd01baa941f36e32c63470a32986b3e5d1d8944553
- SSDEEP 96:fbC3IDAY/lJ/4DkuhuLhiDQvDs2WpcaDd7uLBpz/ejpz/eWvbhJ:fcIDgDkIdDSDsDp5DdIMpvn
- TLSH T1DBB1EB05B3C5A646C6FE96E98DD37501E24B793206C4CC45F04FA0C727FDA8B71AAC56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1