General
- Target FUUUUUUUUUUUUUUUUUUUUUUU.bat
- Size 13KB
- Sample260816-w7pbcsgn7y
- SHA256 17426a1e6738306fc19c4a699c692f68a054cd29214a23139682c6012c8e1d5b
- MD5 8f253676ef55b7417b20826a3cfa08bb
- SHA1 8a9e403fa13276f9ad2f533246d8686f6d7debc3
- SHA512 479d0b0ab0ab455f87a3d4c91104da24f102eb9584fee00e56fa8e57f630d36b3cf57808e3d435ca429ae2369cce1d71615b0a55ea51f1120bf8b7e8d61cb063
- SSDEEP 384:Q69mUjMs2l5uwVxvuRLR1pdFKKgGDV9RSrJC5um:Q6a5uwVQ1pdFKKgGJ9RWJC5um
- TLSH T1AF529314B0548033DAA3B365DD172D21BBBEF2C724D09F80749AB51D971BACA91BD2C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
FUUUUUUUUUUUUUUUUUUUUUUU.bat
Resource
win10v2004-20260513-en
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
FUUUUUUUUUUUUUUUUUUUUUUU.bat
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target FUUUUUUUUUUUUUUUUUUUUUUU.bat
- Size 13KB
- SHA256 17426a1e6738306fc19c4a699c692f68a054cd29214a23139682c6012c8e1d5b
- MD5 8f253676ef55b7417b20826a3cfa08bb
- SHA1 8a9e403fa13276f9ad2f533246d8686f6d7debc3
- SHA512 479d0b0ab0ab455f87a3d4c91104da24f102eb9584fee00e56fa8e57f630d36b3cf57808e3d435ca429ae2369cce1d71615b0a55ea51f1120bf8b7e8d61cb063
- SSDEEP 384:Q69mUjMs2l5uwVxvuRLR1pdFKKgGDV9RSrJC5um:Q6a5uwVQ1pdFKKgGJ9RWJC5um
- TLSH T1AF529314B0548033DAA3B365DD172D21BBBEF2C724D09F80749AB51D971BACA91BD2C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies security service
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Disables service(s)
-
Stops running service(s)
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.