General
- Target 23082026_0636_19082026_Docusign_Installer.bat.zip
- Size 127KB
- Sample260823-hdazzshe68
- SHA256 ac7c10de85446a11e52f0b7dd262f8743b5f4e120e616ad9850e248be5f357c8
- MD5 4604658bf40f8779f319382d926dcdbf
- SHA1 5dda7e70d3267507589a677842464ec879892c1b
- SHA512 8516ccba4e1a6254418c55b90eb1af1844b1233ec679337d9201c60f7d192c27f07ae248bc506ca8aba253bc2dd4cb4e0e27d3ccbed592b782268c55e08695cb
- SSDEEP 1536:M88VWma57w5FWfBG0gIJfgfUfO3Zyxfe2Bq+b81GE11ow:MdVY2Os0gIJQN+Zlb81p
- TLSH T183D3E024E85A7DDD21CBF621A06F51434B6C4CA2E8F73B8814E02F67A71195E43CDDAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Docusign_Installer.bat
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
Docusign_Installer.bat
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://dsyscod.com/docu.exe
Targets
-
- Target Docusign_Installer.bat
- Size 11.8MB
- SHA256 de365fbad1d040289c2fd84f322ca8dc8f9e66fbc2e8754dfe69313ff4989c47
- MD5 a56e447daceeddd5c03bae56c61f4457
- SHA1 ca2f14dd181b8481553d8b9f63bb0f8fe64c9473
- SHA512 05e3253bbf91bb3d862f02bb4a3a546a9dc5c76b8d29f36c9d568e5a1afa022039f433085c654db8d26517a81a13e9b32f8a84cff6f127e4d59d85773a8e1266
- SSDEEP 49152:Kppppppppppppppppppppppppppppppppppppppppppppppppppppppppl:2
- TLSH T187C6F1464FE70BE2FA482D8C3D282546151B7AB27A60D1BF1DF730458BBCA9D203579E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.