General
- Target command.bat
- Size 1KB
- Sample260929-rhb8aas1f1
- SHA256 7ff997bf228bbc9dd7e2ff5332036e28f289192eaa07fa0e7cca1463460698eb
- MD5 b7d951cc246af4c27c5e8caae14cad90
- SHA1 ff6d6cfe14a4872aedee966bfbd81c29aa229bed
- SHA512 e7733dc0aedb5e30109bfbf0c09852760222d3d759f1ee4c0fc5808914c04ebe2ca2e94ea64d4e6367f8443820072ee52aab5ca55f12f3fcd11a5fbd589e8bd1
- TLSH T13B11806FDE30E8D4433E71F58C396D9300E11F6296B6995CC90016645DA8349DF1705C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
command.bat
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
command.bat
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://build.polysupport.team/otadm/build.zip
Targets
-
- Target command.bat
- Size 1KB
- SHA256 7ff997bf228bbc9dd7e2ff5332036e28f289192eaa07fa0e7cca1463460698eb
- MD5 b7d951cc246af4c27c5e8caae14cad90
- SHA1 ff6d6cfe14a4872aedee966bfbd81c29aa229bed
- SHA512 e7733dc0aedb5e30109bfbf0c09852760222d3d759f1ee4c0fc5808914c04ebe2ca2e94ea64d4e6367f8443820072ee52aab5ca55f12f3fcd11a5fbd589e8bd1
- TLSH T13B11806FDE30E8D4433E71F58C396D9300E11F6296B6995CC90016645DA8349DF1705C
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.