General
- Target f5yrphMWepLW.zH.decoded.zip
- Size 6.6MB
- Sample260909-wp25hadc37
- SHA256 877de0cd04d54def0deaeabbd5dc392a1c6d853e041c37b1ca11954ea79c3b9c
- MD5 6eac0f6a04d83493d0b05e25066ec7de
- SHA1 a2e68f4d12ca516aa75fad99cb98392419b20a81
- SHA512 ac74005bfd2f07bba88b2c9932903e8405885a4508f2f11aaacfe3d5843de8d83c39e06782dfc90f4cf863880bb3dba30b115f5b7da8bc299aed615b2e395841
- SSDEEP 98304:GruKOfZAKKyfueVDGwjIRVHoX5lHz9P2o0P:WyfuvVHoX5lHcP
- TLSH T11866E796144D40E308F9DBB2F825AD8A7B9E02FF5012959C31D0DCA85B6E18B46FF1DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
6pGtNaMpA.bat
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 6pGtNaMpA.bat
- Size 6.6MB
- SHA256 777ef76e1e8ee5c621d22e17147f3b37efc7b4e3d8b5403eaa5f289d665f113a
- MD5 5a5becc70d747adb8cc4ddda14821d71
- SHA1 b8ea895f80c1ce4700398bcec4d486615a8d00b1
- SHA512 ca0ced542a18b461b4721790e8b95213c7e50a21eafdbb2b6084d8e2fddc4bd21bf459b94d9ba9e7227cf998177018d4a3706a7c4179b5d0e9b2410881beffec
- SSDEEP 98304:KruKOfZAKKyfueVDGwjIRVHoX5lHz9P2o0a:ayfuvVHoX5lHca
- TLSH T1D066E796144D40E308F9DBB2F825AD8A7B9E02FF5012959C31D0DCA85B6E18B46FF1DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Deletes itself
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1