Overview

overview

8

Static

static

1

Details of...on.bat

windows11-21h2-x64

8

Resubmissions

26/08/2026, 10:18

260826-mcap2swgph8

26/08/2026, 10:16

260826-mat1xacf998

Sharing

Copy URL Twitter E-mail

General

  • Target
    Details of abnormal invoice verification.bat
  • Size 4KB
  • Sample260826-mcap2swgph
  • SHA256 ec52839369a268486f70a4a45333badd8ccb7aa1b21a4f608abb39dd5ccd0898
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      Details of abnormal invoice verification.bat
    • Size 4KB
    • SHA256 ec52839369a268486f70a4a45333badd8ccb7aa1b21a4f608abb39dd5ccd0898
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Indicator Removal: Network Share Connection Removal

      Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.

      defense_evasion

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks