General
- Target VersaMenu_v2 (3).lua
- Size 62KB
- Sample260811-vbv9cswhqc
- SHA256 fa91aba0a79ad05e2feb9783e8fc518fe02562f84f734121dc8337ba5e109572
- MD5 a1ae1f8803a0146f785fdf806c4f9b45
- SHA1 b7cbf1279f2c78c4296bc296ce6e0b7599d44915
- SHA512 c724db56cd5777350111deabfd48e1334a169174dcf94838df0b686928d4ebafe1be9d01e38afbd248d0a3d4e8986da9d11369a2d1ab1dccbd658456e11356cc
- SSDEEP 768:A/1NcFBvAJTJPLWzkDuIiv1TZnuT+JEdplPG5VsuRwA9kPKm2W2lVQMpzkCXitcY:wQkqZDj+
- TLSH T1FC53C64A3D4220B0A743FB9AECA74E01FEF65417164A3A4E35BD02942F9911D83FE7E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VersaMenu_v2 (3).bat
Resource
win11ltsc2024-20260709-en
29 signatures
150 seconds
Malware Config
Targets
-
- Target VersaMenu_v2 (3).lua
- Size 62KB
- SHA256 fa91aba0a79ad05e2feb9783e8fc518fe02562f84f734121dc8337ba5e109572
- MD5 a1ae1f8803a0146f785fdf806c4f9b45
- SHA1 b7cbf1279f2c78c4296bc296ce6e0b7599d44915
- SHA512 c724db56cd5777350111deabfd48e1334a169174dcf94838df0b686928d4ebafe1be9d01e38afbd248d0a3d4e8986da9d11369a2d1ab1dccbd658456e11356cc
- SSDEEP 768:A/1NcFBvAJTJPLWzkDuIiv1TZnuT+JEdplPG5VsuRwA9kPKm2W2lVQMpzkCXitcY:wQkqZDj+
- TLSH T1FC53C64A3D4220B0A743FB9AECA74E01FEF65417164A3A4E35BD02942F9911D83FE7E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2