General
- Target Ebola Puller.bat
- Size 1022B
- Sample260826-vwpx3stape
- SHA256 f67d25731daf0c95b765d484137b41f62f73ab10ab9bcada7bea518dca7f89db
- MD5 d4fb5b3ad1de565ddcacb867c6332d9d
- SHA1 f8450cd95502b03d68704b57d0f11205267d8c4c
- SHA512 787ca9f06345322a884f4d922784a2ca4960fd951a2b33b9d60780d09997646b36e1b48e81e3aae4d04831b2bb4f7043c9dd2e3b15daf147cb13341890840f22
- TLSH T1D81161913443827186F1CA507B57AC23C407827B235F14AC312EA12F0F25A6130FD8FA
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Ebola Puller.bat
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Ebola Puller.bat
- Size 1022B
- SHA256 f67d25731daf0c95b765d484137b41f62f73ab10ab9bcada7bea518dca7f89db
- MD5 d4fb5b3ad1de565ddcacb867c6332d9d
- SHA1 f8450cd95502b03d68704b57d0f11205267d8c4c
- SHA512 787ca9f06345322a884f4d922784a2ca4960fd951a2b33b9d60780d09997646b36e1b48e81e3aae4d04831b2bb4f7043c9dd2e3b15daf147cb13341890840f22
- TLSH T1D81161913443827186F1CA507B57AC23C407827B235F14AC312EA12F0F25A6130FD8FA
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1