General
- Target AncelsPerformanceBatch.bat
- Size 170KB
- Sample260905-aw1pcstclh
- SHA256 21063026de5d49c5cd3b5acf69b6e8e147ea5597ed432e124f3b53589a09d94e
- MD5 dd634c2a9962bab5f172a5dd29120f26
- SHA1 8cd11ccbdbe85ab4c8a6ccf1c57c3ff0da360dc2
- SHA512 af7480efc25178f4328e6b76b33f89a15fec3af6501e68ceb5df762ae4a295e31ce71a9ef88a86bacfcfe4fc58cbb08dcd606e83a08dff107852553ea67c0fcb
- SSDEEP 1536:1l9cSGM8JQlBTUgIDpfq+2+SMR8OcVyrHaXvgn1OuewM+ZqR:i3zDzcLzr
- TLSH T14404FE217D1543B4C6CAAA29EB7D8C127B2673C3947167207AAF60D90BB7106CB367C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AncelsPerformanceBatch.bat
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
AncelsPerformanceBatch.bat
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target AncelsPerformanceBatch.bat
- Size 170KB
- SHA256 21063026de5d49c5cd3b5acf69b6e8e147ea5597ed432e124f3b53589a09d94e
- MD5 dd634c2a9962bab5f172a5dd29120f26
- SHA1 8cd11ccbdbe85ab4c8a6ccf1c57c3ff0da360dc2
- SHA512 af7480efc25178f4328e6b76b33f89a15fec3af6501e68ceb5df762ae4a295e31ce71a9ef88a86bacfcfe4fc58cbb08dcd606e83a08dff107852553ea67c0fcb
- SSDEEP 1536:1l9cSGM8JQlBTUgIDpfq+2+SMR8OcVyrHaXvgn1OuewM+ZqR:i3zDzcLzr
- TLSH T14404FE217D1543B4C6CAAA29EB7D8C127B2673C3947167207AAF60D90BB7106CB367C5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Modifies boot configuration data using bcdedit
-
Modifies file permissions
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1