87c9f03844d7098f2ef7a394a75a9e509fda3f307a6f170e9be82057e251c237 | Triage™

Login
Reports

Overview

overview

8

Static

static

1

cleaner.bat

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
cleaner.bat
Size 111KB
Sample260817-pnjs7sbd86
SHA256 87c9f03844d7098f2ef7a394a75a9e509fda3f307a6f170e9be82057e251c237
MD5 ab6e644cee7a70072456d3dde25fe473
SHA1 a797c71d6199a571432acc39da2ce9a8df872923
SHA512 bba0a34460a596adb9ba7823cb02e8f673545513d369e24c8e7a1bf4d7fb8601a370f826d60c89bbffc4c893bae512289efe37aab2a7d7efddedec2e959a4880
SSDEEP 768:zo9R/KZzmezF/svUsfg8gVhCBL1oPYdxCA1n5xpoL8oPlRPrPEPupL5LvLpLjLgd:E9xg8gUDRnvplQL5LvLpLjLnO
TLSH
T1EEB3E292631895B2D96704CC83EF964D3C7CE0CA21F537A242F2BA48D94A83C557ADF7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion execution persistence privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

cleaner.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion execution persistence privilege_escalation

Malware Config

Targets

- Target
  cleaner.bat
- Size 111KB
- SHA256 87c9f03844d7098f2ef7a394a75a9e509fda3f307a6f170e9be82057e251c237
- MD5 ab6e644cee7a70072456d3dde25fe473
- SHA1 a797c71d6199a571432acc39da2ce9a8df872923
- SHA512 bba0a34460a596adb9ba7823cb02e8f673545513d369e24c8e7a1bf4d7fb8601a370f826d60c89bbffc4c893bae512289efe37aab2a7d7efddedec2e959a4880
- SSDEEP 768:zo9R/KZzmezF/svUsfg8gVhCBL1oPYdxCA1n5xpoL8oPlRPrPEPupL5LvLpLjLgd:E9xg8gUDRnvplQL5LvLpLjLnO
- TLSH
  T1EEB3E292631895B2D96704CC83EF964D3C7CE0CA21F537A242F2BA48D94A83C557ADF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion execution persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy