General
- Target cmd.bat
- Size 7B
- Sample260810-yypa4ssvcy
- SHA256 7371f071a9a4e653a5afd134bce9c735ef74b0421d6988958e5c6d8a34feaa3b
- MD5 45e0edaca8702e6e90d1d98cf3647d5f
- SHA1 ebf1f9fa8afd6d1932bd65bc4cc3af89a4c8e228
- SHA512 5b92708f1d10777a3219892c9f5e5a2bb0af259004fb1f44aa3b0832859c31d07de3c8960f3f55bc56f206c2008f4d733380d3bb1d947e316123f5a5f8e92fa8
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
cmd.bat
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
cmd.bat
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target cmd.bat
- Size 7B
- SHA256 7371f071a9a4e653a5afd134bce9c735ef74b0421d6988958e5c6d8a34feaa3b
- MD5 45e0edaca8702e6e90d1d98cf3647d5f
- SHA1 ebf1f9fa8afd6d1932bd65bc4cc3af89a4c8e228
- SHA512 5b92708f1d10777a3219892c9f5e5a2bb0af259004fb1f44aa3b0832859c31d07de3c8960f3f55bc56f206c2008f4d733380d3bb1d947e316123f5a5f8e92fa8
- MD5 SHA1 SHA512
-
Drops file in Drivers directory
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Drops file in System32 directory