General
- Target XD.bat
- Size 952B
- Sample260812-x1hexatckh
- SHA256 147c58b303630be247204f872873e081305d4ce413a10eb9d4c805dc722a0735
- MD5 5206d32f83a1427eca5c8a417570dd99
- SHA1 c614846febbde2b348f085d945b46c526fc0470d
- SHA512 c3cdeeffc63242b4c4ad08a61c0654fda3ed1d0958e2b4076deb3f10db1f6facaaa8ad933faa70ee00613ff3ab50fc9c46b0be3037dc2c6ebcb67cb6e0589dde
- TLSH T1EF115001974DC5A500D08138D9BEC742BC1DA3EE4243BB4B79DCCA5A7AB04CC87FD160
- MD5 SHA1 SHA512 TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
XD.bat
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target XD.bat
- Size 952B
- SHA256 147c58b303630be247204f872873e081305d4ce413a10eb9d4c805dc722a0735
- MD5 5206d32f83a1427eca5c8a417570dd99
- SHA1 c614846febbde2b348f085d945b46c526fc0470d
- SHA512 c3cdeeffc63242b4c4ad08a61c0654fda3ed1d0958e2b4076deb3f10db1f6facaaa8ad933faa70ee00613ff3ab50fc9c46b0be3037dc2c6ebcb67cb6e0589dde
- TLSH T1EF115001974DC5A500D08138D9BEC742BC1DA3EE4243BB4B79DCCA5A7AB04CC87FD160
- MD5 SHA1 SHA512 TLSH
Score9/10-
Renames multiple (234) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.