General
- Target bypass3.bat
- Size 2KB
- Sample261102-gdsdlahv2l
- SHA256 f8200085d0ef171486981af8de238f06995d3fea37d251db49d2ab9c326fd4ba
- MD5 fae1d992c4e2dca5d12db0e5483b747d
- SHA1 d9f80a7d9f9ac6b12b0112ac0e4dcd58b46f52f0
- SHA512 dd4be6f8e953c6e696868d5e1fa6bbf21b982ca979b4b2c9e345851be265ffc88cd4a4dc113b42c15b70e5f97dc904c2240900583628ed7ace1c93e0007be10e
- TLSH T1F4417463344C7C12098B90A29977F05329B461CB7300AEE8E1F5CE499A98FE5CBC7C5D
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
bypass3.bat
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
bypass3.bat
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target bypass3.bat
- Size 2KB
- SHA256 f8200085d0ef171486981af8de238f06995d3fea37d251db49d2ab9c326fd4ba
- MD5 fae1d992c4e2dca5d12db0e5483b747d
- SHA1 d9f80a7d9f9ac6b12b0112ac0e4dcd58b46f52f0
- SHA512 dd4be6f8e953c6e696868d5e1fa6bbf21b982ca979b4b2c9e345851be265ffc88cd4a4dc113b42c15b70e5f97dc904c2240900583628ed7ace1c93e0007be10e
- TLSH T1F4417463344C7C12098B90A29977F05329B461CB7300AEE8E1F5CE499A98FE5CBC7C5D
- MD5 SHA1 SHA512 TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Disables service(s)