General
- Target lol.bat
- Size 533B
- Sample260818-fe17fswekc
- SHA256 186c35beff17239ca966aa2642535e57d041c4fb3b4e572619bdf222b23e8399
- MD5 7b7abedd00e6d7ad6e070375566faea0
- SHA1 0fdf31fbbc743c9badb5e560c08d5989819dd982
- SHA512 1f6b4716d66099bf8d2e5dbbb49e528f280b2de316934e2bbbaa256b5f0c492be767ab8ab041875886767549f713025d78383c04a6ceb7599ad482c9c69220f9
- TLSH T1EBF0242F63515A0C8D6147998CAAD83F518FC9C45280ABEF16BD241A6CA586E43CF819
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lol.bat
Resource
win10v2004-20260513-en
8 signatures
30 seconds
Behavioral task
behavioral2
Sample
lol.bat
Resource
win10ltsc2021-20260513-en
8 signatures
30 seconds
Behavioral task
behavioral3
Sample
lol.bat
Resource
win11-20260513-en
7 signatures
30 seconds
Behavioral task
behavioral4
Sample
lol.bat
Resource
win11ltsc2024-20260709-en
8 signatures
30 seconds
Malware Config
Targets
-
- Target lol.bat
- Size 533B
- SHA256 186c35beff17239ca966aa2642535e57d041c4fb3b4e572619bdf222b23e8399
- MD5 7b7abedd00e6d7ad6e070375566faea0
- SHA1 0fdf31fbbc743c9badb5e560c08d5989819dd982
- SHA512 1f6b4716d66099bf8d2e5dbbb49e528f280b2de316934e2bbbaa256b5f0c492be767ab8ab041875886767549f713025d78383c04a6ceb7599ad482c9c69220f9
- TLSH T1EBF0242F63515A0C8D6147998CAAD83F518FC9C45280ABEF16BD241A6CA586E43CF819
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.