General
- Target NoEscape.bat
- Size 1KB
- Sample260930-sasezaaf66
- SHA256 75aa8e537bb97559f90995ffa9d1d210bf9bd8ee07c6fa01c30e5e11613b3f35
- MD5 ccf18a9bac640dee2895a94e1239324d
- SHA1 f96068863e0ee7c4ee028e2c2fd4883043341cd3
- SHA512 44e53ff4597b691a5bdbb6f45d7f952a531fc163206e612c49e49c8ce2e0b1811a8ca98e283d64eef6b918aa5505ceed5abcaa5af626b9fcb3370d12fa60c99b
- TLSH T18E2166211A404E936183E4E4E7A32201A76BF24F64156CF5F4E631C4B93F2888BFEBD5
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
NoEscape.bat
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
NoEscape.bat
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target NoEscape.bat
- Size 1KB
- SHA256 75aa8e537bb97559f90995ffa9d1d210bf9bd8ee07c6fa01c30e5e11613b3f35
- MD5 ccf18a9bac640dee2895a94e1239324d
- SHA1 f96068863e0ee7c4ee028e2c2fd4883043341cd3
- SHA512 44e53ff4597b691a5bdbb6f45d7f952a531fc163206e612c49e49c8ce2e0b1811a8ca98e283d64eef6b918aa5505ceed5abcaa5af626b9fcb3370d12fa60c99b
- TLSH T18E2166211A404E936183E4E4E7A32201A76BF24F64156CF5F4E631C4B93F2888BFEBD5
- MD5 SHA1 SHA512 TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification