General
- Target Adobe_v6.0.2_addon.bat
- Size 4KB
- Sample260814-g48s9swfph
- SHA256 23e0f832ea03853eca36b767ce243bdd7e9b6d38d7a49935be30964f5c256336
- MD5 6b7c93a7cc222df9ab0e3382b3cc96ad
- SHA1 089aa613e4a500a2772be2418b261aeac11d6c87
- SHA512 c381b568bf55f1f73ed133310e063f74e6a72d2a37df01d9d8284d85801c548cf51e7f4ed88fc43bd217c468d0d73c94cfe28715a56d2bbbd73ce7a0451f8df4
- SSDEEP 96:q6aZ0faGHfLhnKpC/R16OsYSKmKPMLyCHS7/c3AUyIx4oUp6KkeZgpQ/+:q6aZ0J/LV+C/RyYJmKELjS7/cT5x4oUW
- TLSH T1A6A1267DCAA5FDC043AE70D0991A3F8210986F23E7B15F6CF9D109AA5D24694DF3A24C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Adobe_v6.0.2_addon.bat
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Adobe_v6.0.2_addon.bat
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://www.dropbox.com/scl/fi/o1o5y1rd5mw22brcvlivw/newbins.bin?rlkey=xgnvr6fdp15g85sb3ucvjbeo0&st=6zmlsiyh&dl=1
Targets
-
- Target Adobe_v6.0.2_addon.bat
- Size 4KB
- SHA256 23e0f832ea03853eca36b767ce243bdd7e9b6d38d7a49935be30964f5c256336
- MD5 6b7c93a7cc222df9ab0e3382b3cc96ad
- SHA1 089aa613e4a500a2772be2418b261aeac11d6c87
- SHA512 c381b568bf55f1f73ed133310e063f74e6a72d2a37df01d9d8284d85801c548cf51e7f4ed88fc43bd217c468d0d73c94cfe28715a56d2bbbd73ce7a0451f8df4
- SSDEEP 96:q6aZ0faGHfLhnKpC/R16OsYSKmKPMLyCHS7/c3AUyIx4oUp6KkeZgpQ/+:q6aZ0J/LV+C/RyYJmKELjS7/cT5x4oUW
- TLSH T1A6A1267DCAA5FDC043AE70D0991A3F8210986F23E7B15F6CF9D109AA5D24694DF3A24C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.