General
- Target Oneclick-V8.4.bat
- Size 272KB
- Sample260827-2ws33a1sds
- SHA256 248e195707624862a4268cae02ff94c6b2cd8135afcb84324142249c494568bf
- MD5 b3ea15bf4403b1a9e048e7908bac2db5
- SHA1 46647b9ba5eed25a7a4e4d30bb15ca568dcbd7a3
- SHA512 4f683bb901f0ac54c9f30624280449d0ab661517c68d7789c8ab7fd0002a5284876b97746f1c8701c8f1c2e2435d521f4461ab71f0b4e39a749f7a9710a2e100
- SSDEEP 3072:tkz4FbQpKFfCxn2NqJpZxa2GHPjr3Nm6m:tkz4FbRFfCxn2NqJpZxa2GHPjr3Nzm
- TLSH T1D254C62574001A2541B79E6AC5775C42FB4112C3CB501AEAB4EFA0EC2FB751BEDBBAD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Oneclick-V8.4.bat
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Oneclick-V8.4.bat
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Oneclick-V8.4.bat
- Size 272KB
- SHA256 248e195707624862a4268cae02ff94c6b2cd8135afcb84324142249c494568bf
- MD5 b3ea15bf4403b1a9e048e7908bac2db5
- SHA1 46647b9ba5eed25a7a4e4d30bb15ca568dcbd7a3
- SHA512 4f683bb901f0ac54c9f30624280449d0ab661517c68d7789c8ab7fd0002a5284876b97746f1c8701c8f1c2e2435d521f4461ab71f0b4e39a749f7a9710a2e100
- SSDEEP 3072:tkz4FbQpKFfCxn2NqJpZxa2GHPjr3Nm6m:tkz4FbRFfCxn2NqJpZxa2GHPjr3Nzm
- TLSH T1D254C62574001A2541B79E6AC5775C42FB4112C3CB501AEAB4EFA0EC2FB751BEDBBAD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.