General
- Target raw.bat
- Size 749B
- Sample260809-2gexwszxaw
- SHA256 8f8224fe28ba0b5ee523b130e23b988d678928a50b153822b29214b94356e310
- MD5 3a94cb4a1d52c50c6cdd8c6f162ea2d4
- SHA1 8d6b16db7bd5b2e9ab47223abc8e7b3d77f8a5cb
- SHA512 742e087d4ec751843a4445d9366ee27cc981c012894fa12850c09b4951b72d97c1a1237f828a5e97f92e7662ddf053406b6ecbbaf0f20540f16d7d5f8a83e671
- TLSH T10601493CCB70EBC543AD709486322D1B30D936B2CBB56A2CCA5215166CC6E54FF2928C
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
raw.bat
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
raw.bat
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target raw.bat
- Size 749B
- SHA256 8f8224fe28ba0b5ee523b130e23b988d678928a50b153822b29214b94356e310
- MD5 3a94cb4a1d52c50c6cdd8c6f162ea2d4
- SHA1 8d6b16db7bd5b2e9ab47223abc8e7b3d77f8a5cb
- SHA512 742e087d4ec751843a4445d9366ee27cc981c012894fa12850c09b4951b72d97c1a1237f828a5e97f92e7662ddf053406b6ecbbaf0f20540f16d7d5f8a83e671
- TLSH T10601493CCB70EBC543AD709486322D1B30D936B2CBB56A2CCA5215166CC6E54FF2928C
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.