General
- Target vit-installation-script.bat
- Size 2KB
- Sample260825-afdjwsdl8s
- SHA256 1cc392e704957eac53275a1244e0db77201a8463deb58b12fdc885bae4a74655
- MD5 b4690bfa906682d33420791d66a4892c
- SHA1 2fd5d8ffeee6d35ed470e6ab0c8274f3eb432149
- SHA512 12dc5339d5cf6b9832e3d9c5e0b0de7632f4454219def0838febac7c17571f52fc98865d4c6ec2f6aba5b2617feddfe3e4b1e946994381a78a1006bc2e60816a
- TLSH T1705101BA53138568493D07AA9E5D0394FF09C08B5F20A86C349AC16C9B7B19396FE1CE
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
vit-installation-script.bat
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
vit-installation-script.bat
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target vit-installation-script.bat
- Size 2KB
- SHA256 1cc392e704957eac53275a1244e0db77201a8463deb58b12fdc885bae4a74655
- MD5 b4690bfa906682d33420791d66a4892c
- SHA1 2fd5d8ffeee6d35ed470e6ab0c8274f3eb432149
- SHA512 12dc5339d5cf6b9832e3d9c5e0b0de7632f4454219def0838febac7c17571f52fc98865d4c6ec2f6aba5b2617feddfe3e4b1e946994381a78a1006bc2e60816a
- TLSH T1705101BA53138568493D07AA9E5D0394FF09C08B5F20A86C349AC16C9B7B19396FE1CE
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL