General
- Target VortexVr.bat
- Size 14KB
- Sample260805-vza84asalg
- SHA256 666d920bddf08df8adee4e9b7fa01616f367ff282a952a48d3b09a247fbc49de
- MD5 534fdd5dba89f581df34951ed3786e3b
- SHA1 303bd64910111db7973906679466725325a7ca44
- SHA512 7588c623bcda4d14fa3370a081593eb212b58f8afe182e0939a8c3fc1cf1fac2bedc73b9ae723bfc385d2eee58a98c4503abdb16d05273ad4b3cffa2e87de01d
- SSDEEP 192:+clGDkkDkIP8DLnDsDpZ2Ddv/DkkDkIP8DLnDsDpZ2Ddv/DkkDkIP8DLnDsDpZ2+:NGvwI035xvwI035xvwI035xvwI035H+8
- TLSH T11262DF097384E189CBEDA2EDCAD3B945D50759211388CC56F24BA8C763FC70B71AEC5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VortexVr.bat
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
VortexVr.bat
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target VortexVr.bat
- Size 14KB
- SHA256 666d920bddf08df8adee4e9b7fa01616f367ff282a952a48d3b09a247fbc49de
- MD5 534fdd5dba89f581df34951ed3786e3b
- SHA1 303bd64910111db7973906679466725325a7ca44
- SHA512 7588c623bcda4d14fa3370a081593eb212b58f8afe182e0939a8c3fc1cf1fac2bedc73b9ae723bfc385d2eee58a98c4503abdb16d05273ad4b3cffa2e87de01d
- SSDEEP 192:+clGDkkDkIP8DLnDsDpZ2Ddv/DkkDkIP8DLnDsDpZ2Ddv/DkkDkIP8DLnDsDpZ2+:NGvwI035xvwI035xvwI035xvwI035H+8
- TLSH T11262DF097384E189CBEDA2EDCAD3B945D50759211388CC56F24BA8C763FC70B71AEC5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1