General
- Target patch.bat
- Size 1KB
- Sample260825-pnc1naywas
- SHA256 20e144209a8608a8a1b416d2c3e3ffebe06fa917bfc1b350793a32780a1684b4
- MD5 8aafee6365f0837c68d4216668c79259
- SHA1 7d5b700b9c091534e35737c3d3b111d622c403b4
- SHA512 c7d1a4c1cab38ba3cc7840a4747f0fba3e0331c562982a5d5f2e760a07e5e18861ea2116c78527051ac07bfc4b6decdcb13ec56e78ee61f4c9f2ae5561f3c11f
- TLSH T1952133DB2046382D9EF3959185955399DF598B83870872CE35FCC045AF072E947C648E
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
patch.bat
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
patch.bat
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target patch.bat
- Size 1KB
- SHA256 20e144209a8608a8a1b416d2c3e3ffebe06fa917bfc1b350793a32780a1684b4
- MD5 8aafee6365f0837c68d4216668c79259
- SHA1 7d5b700b9c091534e35737c3d3b111d622c403b4
- SHA512 c7d1a4c1cab38ba3cc7840a4747f0fba3e0331c562982a5d5f2e760a07e5e18861ea2116c78527051ac07bfc4b6decdcb13ec56e78ee61f4c9f2ae5561f3c11f
- TLSH T1952133DB2046382D9EF3959185955399DF598B83870872CE35FCC045AF072E947C648E
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.