General
- Target bat.bat
- Size 441B
- Sample260828-a2drsa1zbw
- SHA256 d812151891c991ac9c2654b8a54eab5639507e68ae5ea66c09341fe828d559ec
- MD5 cbbff245488a59e991c85cd6d899ef3e
- SHA1 36d5837e01154650e2ee33b5b534951d8dad949e
- SHA512 3cdd90b93356ed3a8bacf24e83ccc3dc5a8b0d3a0f337f10a65e1a2a0a8bbe20c05dc2557735e4469041ad21a44aa1840afbe41afad99772f7e3db3491599c2d
- TLSH T170F0235B71421359CAF38162CCEE6816792E124123065FD618A1452AFC800C5C7CF7C5
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
bat.bat
Resource
win10v2004-20260513-en
8 signatures
30 seconds
Behavioral task
behavioral2
Sample
bat.bat
Resource
win10ltsc2021-20260513-en
8 signatures
30 seconds
Behavioral task
behavioral3
Sample
bat.bat
Resource
win11-20260513-en
7 signatures
30 seconds
Behavioral task
behavioral4
Sample
bat.bat
Resource
win11ltsc2024-20260709-en
8 signatures
30 seconds
Malware Config
Targets
-
- Target bat.bat
- Size 441B
- SHA256 d812151891c991ac9c2654b8a54eab5639507e68ae5ea66c09341fe828d559ec
- MD5 cbbff245488a59e991c85cd6d899ef3e
- SHA1 36d5837e01154650e2ee33b5b534951d8dad949e
- SHA512 3cdd90b93356ed3a8bacf24e83ccc3dc5a8b0d3a0f337f10a65e1a2a0a8bbe20c05dc2557735e4469041ad21a44aa1840afbe41afad99772f7e3db3491599c2d
- TLSH T170F0235B71421359CAF38162CCEE6816792E124123065FD618A1452AFC800C5C7CF7C5
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.