General
- Target lol_obf.bat
- Size 355KB
- Sample260818-e7yflaej7y
- SHA256 a1bf604a469196eb00394184c01ba2ff64c76f836cc79ee1049a8e9c12b04599
- MD5 4c184e67e46a04302441327e51213c7e
- SHA1 22ba3be4354f006ac1eb10f014fc46cdcef4eada
- SHA512 a998dbf388adafef058682481466f028194917c43ccff189f9534c16993f809b3b47a1e87eddff15b2243e5f49b7f35ebb74522bd0b827dc51b017785074a495
- SSDEEP 6144:tBHwAF6dBrtosxmjfZaVXkfOVKTPcFoh8QxRoMzeOAq:vwckLUjf8XXVKTkShXgCQq
- TLSH T11274D122821D4E3F63E463AE58BD1B1E6EC88CC040B61FDCD5785E8B774E9071BA919D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
lol_obf.bat
Resource
win10v2004-20260513-en
5 signatures
30 seconds
Behavioral task
behavioral2
Sample
lol_obf.bat
Resource
win10ltsc2021-20260513-en
5 signatures
30 seconds
Behavioral task
behavioral3
Sample
lol_obf.bat
Resource
win11-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral4
Sample
lol_obf.bat
Resource
win11ltsc2024-20260709-en
4 signatures
30 seconds
Malware Config
Targets
-
- Target lol_obf.bat
- Size 355KB
- SHA256 a1bf604a469196eb00394184c01ba2ff64c76f836cc79ee1049a8e9c12b04599
- MD5 4c184e67e46a04302441327e51213c7e
- SHA1 22ba3be4354f006ac1eb10f014fc46cdcef4eada
- SHA512 a998dbf388adafef058682481466f028194917c43ccff189f9534c16993f809b3b47a1e87eddff15b2243e5f49b7f35ebb74522bd0b827dc51b017785074a495
- SSDEEP 6144:tBHwAF6dBrtosxmjfZaVXkfOVKTPcFoh8QxRoMzeOAq:vwckLUjf8XXVKTkShXgCQq
- TLSH T11274D122821D4E3F63E463AE58BD1B1E6EC88CC040B61FDCD5785E8B774E9071BA919D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.