General
- Target Bat2EXE.zip
- Size 12.3MB
- Sample261101-1ppavsdv2x
- SHA256 4869eb7d2f3a3750539ee56947623670c86dd9df475cc2832e2a02f671a0658e
- MD5 bfef6d69dc6e9d3bac0122c1faab4cf4
- SHA1 bbc9fa80277288b592205f0bb422a788ff9fcc54
- SHA512 0ccaf2adb6d1262604b44e1c4b32632102f32c13253abd8d40e8dd6d1ac88ce9688181766e5a3b54c447e21061a78cb8256015b929a703e80d2ae506958a407e
- SSDEEP 196608:wCBLXDRaNB0RRL5z6eN3L0NtPlE1TRovsywgzQaXB+eE+xYbt6Ka5I244:wCVkNBCRlv0NJlcHg9X35+onIs
- TLSH T14BD6334FBFC0EDD87A5E64690A110A1CBD4DF08D6A2C1A0259E93E7D2A0D3DDB37E851
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bat2EXE.zip
Resource
win10v2004-20260911-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
Bat2EXE.zip
Resource
win11ltsc2024-20260911-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target Bat2EXE.zip
- Size 12.3MB
- SHA256 4869eb7d2f3a3750539ee56947623670c86dd9df475cc2832e2a02f671a0658e
- MD5 bfef6d69dc6e9d3bac0122c1faab4cf4
- SHA1 bbc9fa80277288b592205f0bb422a788ff9fcc54
- SHA512 0ccaf2adb6d1262604b44e1c4b32632102f32c13253abd8d40e8dd6d1ac88ce9688181766e5a3b54c447e21061a78cb8256015b929a703e80d2ae506958a407e
- SSDEEP 196608:wCBLXDRaNB0RRL5z6eN3L0NtPlE1TRovsywgzQaXB+eE+xYbt6Ka5I244:wCVkNBCRlv0NJlcHg9X35+onIs
- TLSH T14BD6334FBFC0EDD87A5E64690A110A1CBD4DF08D6A2C1A0259E93E7D2A0D3DDB37E851
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.