General
- Target cenclean.bat
- Size 543KB
- Sample261026-267dfahs3y
- SHA256 15cb54fd0b68853595845785cd9039ff053c46d72077f099f2e5bb888fabedd2
- MD5 bee3603733c2d3261e0e27e4a6e31f5b
- SHA1 c428ee5b8629eebafcde5a88a39a670ccd462cee
- SHA512 40506a6ae34a5c5e13ca20789993eb4cb5c40d976ce488a9ca7a6f7e6369b35f57ad529bb56936890328bec4075c53b4329a728d4faacec107ab5494653c13df
- SSDEEP 1536:osq0dLLLlL7LBL7vXgjIGHSh7DZQLwUDOmE8i/0fj8l9q0dLLLlL7LBL7vXgjcUW:aRcUFivZ7jvzYx8+9oNQ0OL0
- TLSH T163C4334163199232D867208CD7DFA55939A8D08B31E037E351F9BB0DD88F83C55BAEE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
cenclean.bat
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
cenclean.bat
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target cenclean.bat
- Size 543KB
- SHA256 15cb54fd0b68853595845785cd9039ff053c46d72077f099f2e5bb888fabedd2
- MD5 bee3603733c2d3261e0e27e4a6e31f5b
- SHA1 c428ee5b8629eebafcde5a88a39a670ccd462cee
- SHA512 40506a6ae34a5c5e13ca20789993eb4cb5c40d976ce488a9ca7a6f7e6369b35f57ad529bb56936890328bec4075c53b4329a728d4faacec107ab5494653c13df
- SSDEEP 1536:osq0dLLLlL7LBL7vXgjIGHSh7DZQLwUDOmE8i/0fj8l9q0dLLLlL7LBL7vXgjcUW:aRcUFivZ7jvzYx8+9oNQ0OL0
- TLSH T163C4334163199232D867208CD7DFA55939A8D08B31E037E351F9BB0DD88F83C55BAEE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1