Extracted

• • Target
    set-wallpaper-win11.bat
  • Size 6KB
  • SHA256 7de58b346976f9a79e5bfaee5f447b9ad9455f7a5cef729b5e8eed43ce470375
  • MD5 853a6f6fea01e9d43b9a017ed9f2295e
  • SHA1 84c5f9c823494482defb529e676d39cd0df8585d
  • SHA512 13f41db9698874f3afb12aa844541c381d84b977bc7259ca9e52a2393e5a3e3dc5e1bd84758ee7ee3ea8e405747fb36b0e7e2d2c80b6556bac1c32f37e18ce9a
  • SSDEEP 192:OeuasP+JeC2U8KQQTFw+rHiwY8Bi1SUPoicNO:L8P+Bvhw+9M3+NO
  • TLSH
    T120D1A70FAEC415F50C53E529E8AF952EFA0254BB215B0E0174EC82897F6473D8BBD9C6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  executionransomware

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1