General
- Target Windows-repair-tool.bat
- Size 20KB
- Sample260813-wvkgmsce69
- SHA256 0cbd5e962ffd838f7e4cb9c2b9e5bac1885c1ccb846ca19495a4ade56be26ca9
- MD5 4aac4483c06dacfc20251eaa3bd6aa15
- SHA1 59fd9644468e73fb72e28db70bc13efc154127ec
- SHA512 9cd4633ae4596deb4f65296f5296bf10fd90cb4c8078c8c1206667e3a194dcbc7627a31d793296482862f3f96a12a138596e07c6c42177fccaa5329b2aab8636
- SSDEEP 384:U9/H4YVLQGBvvQQLixkXeUL+RwatpI5IrWytsQgQv581X4B4:qYYVLQGBvimXeXI51cW
- TLSH T18092300C3E144561ABF0F614C66E0481E77B838B2C51BB94B5EBB0B4AB32355637EACD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Windows-repair-tool.bat
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Windows-repair-tool.bat
- Size 20KB
- SHA256 0cbd5e962ffd838f7e4cb9c2b9e5bac1885c1ccb846ca19495a4ade56be26ca9
- MD5 4aac4483c06dacfc20251eaa3bd6aa15
- SHA1 59fd9644468e73fb72e28db70bc13efc154127ec
- SHA512 9cd4633ae4596deb4f65296f5296bf10fd90cb4c8078c8c1206667e3a194dcbc7627a31d793296482862f3f96a12a138596e07c6c42177fccaa5329b2aab8636
- SSDEEP 384:U9/H4YVLQGBvvQQLixkXeUL+RwatpI5IrWytsQgQv581X4B4:qYYVLQGBvimXeXI51cW
- TLSH T18092300C3E144561ABF0F614C66E0481E77B838B2C51BB94B5EBB0B4AB32355637EACD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.