General
- Target WindowsDebloater.bat
- Size 18KB
- Sample260905-1jhk5atarf
- SHA256 6d83fbc3647ada2b1176a0979f586cc254cf00b35e7deceae97af0ec4b4d9929
Score
8/10
Malware Config
Targets
-
- Target WindowsDebloater.bat
- Size 18KB
- SHA256 6d83fbc3647ada2b1176a0979f586cc254cf00b35e7deceae97af0ec4b4d9929
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.