General
- Target GayHub.bat
- Size 6KB
- Sample261104-2127jad12s
- SHA256 c7242666e855b8cfca230e29d76bb9286630236456d73bbdc2f71bc24f3323bb
- MD5 2645358b0112532fa81723398a81911d
- SHA1 d511fdb9a2a58b2cd05b178d99576ef71dd44950
- SHA512 4078e82965ee3edac90ad558dc0f635484181bddeac55f06a07781cff60d50dc0feb80b2c7eae8402ad2587381db018b6ecb61c993808e85a7c9606ce64d44f2
- SSDEEP 192:8nWeo7eHro9l4fy3j85sVhdrYB4TpUEmnTbUYLcbKA21svfg8/n:8WToo6f6j85sDdUB4irTbURbKb14x/
- TLSH T160D1D91274546436C0F723F598AB9409FE0B90B780095EC4759E82D86F75BA8937AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
GayHub.bat
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
GayHub.bat
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target GayHub.bat
- Size 6KB
- SHA256 c7242666e855b8cfca230e29d76bb9286630236456d73bbdc2f71bc24f3323bb
- MD5 2645358b0112532fa81723398a81911d
- SHA1 d511fdb9a2a58b2cd05b178d99576ef71dd44950
- SHA512 4078e82965ee3edac90ad558dc0f635484181bddeac55f06a07781cff60d50dc0feb80b2c7eae8402ad2587381db018b6ecb61c993808e85a7c9606ce64d44f2
- SSDEEP 192:8nWeo7eHro9l4fy3j85sVhdrYB4TpUEmnTbUYLcbKA21svfg8/n:8WToo6f6j85sDdUB4irTbURbKb14x/
- TLSH T160D1D91274546436C0F723F598AB9409FE0B90B780095EC4759E82D86F75BA8937AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1