General

  • Target
    bypass3.bat
  • Size 2KB
  • Sample261102-gdsdlahv2l
  • SHA256 f8200085d0ef171486981af8de238f06995d3fea37d251db49d2ab9c326fd4ba
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      bypass3.bat
    • Size 2KB
    • SHA256 f8200085d0ef171486981af8de238f06995d3fea37d251db49d2ab9c326fd4ba
    • MD5 SHA1 SHA512 TLSH
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Disables service(s)

MITRE ATT&CK Enterprise v16

Tasks