Extracted

• • Target
    2new2.bat
  • Size 434B
  • SHA256 0db861fd05760589d14dd8d38c84d0f5438352ee9eadc411ab9619801fddc5ff
  • MD5 a0308359ded67c4c6dc586fdff3f982e
  • SHA1 3289de27b8b517fde47ff55bc498820079ec60db
  • SHA512 b9619af123296c4fa54295db3a14118264e0518f158ddd3cc5f241c521ff97e9ca15709309adebb42828e6380eb024f9ea15c17e1227502cb692434bc38d43a4
  • TLSH
    T1F9E0A333C11CC6109AB14EE2910AF2F15B2946516416ED53F4B11D8DF81317B55396FD
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  discoveryexecutionadwarepersistenceransomwarespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2