General
- Target AMCStore (1).bat
- Size 2KB
- Sample260913-xf68jasbkc
- SHA256 859ec02c60c8fcd3bdc68c417a09a14d9c8fc9012befb723b159817effc1d17c
- MD5 a3aa50e51f59b97794b25eff1c93fd37
- SHA1 8302863315e7f839c09ce0f1b2c7c075b21b9d89
- SHA512 7d617e4916dd0fd26991616bd7319d42d52e2541d69534ea50cdd774ff92ec76433d3aefd1dc0812f96e2905cfaf1c5cb8dbba74376d98c4b47fd477d2847e8f
- TLSH T16551748835A580F82778175E8E3A065DF61556CF8B136C28B06FD06E1F35382B5FEC59
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
AMCStore (1).bat
Resource
win11-20260911-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
AMCStore (1).bat
Resource
win11ltsc2024-20260911-en
17 signatures
300 seconds
Malware Config
Targets
-
- Target AMCStore (1).bat
- Size 2KB
- SHA256 859ec02c60c8fcd3bdc68c417a09a14d9c8fc9012befb723b159817effc1d17c
- MD5 a3aa50e51f59b97794b25eff1c93fd37
- SHA1 8302863315e7f839c09ce0f1b2c7c075b21b9d89
- SHA512 7d617e4916dd0fd26991616bd7319d42d52e2541d69534ea50cdd774ff92ec76433d3aefd1dc0812f96e2905cfaf1c5cb8dbba74376d98c4b47fd477d2847e8f
- TLSH T16551748835A580F82778175E8E3A065DF61556CF8B136C28B06FD06E1F35382B5FEC59
- MD5 SHA1 SHA512 TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)