General
- Target wiper.bat
- Size 4KB
- Sample261112-ex3mkady7t
- SHA256 519cacd62b248b708e1b0587fc5327dc5e154d65d58b1e9aac3b4acf675ccdc5
- MD5 dfe5e4e38d0406284c6dba40f64844e0
- SHA1 e000cbe8d96274cb259ecf2b1574678056855134
- SHA512 0ca99c396ed0cb53491f73b9cc135e07e0b43f9f50c555f317553e02cd42de190caf2578d01d9aff53b841c2b48341480d316b120fed044f661380ada14b7cea
- SSDEEP 96:YdQmqNvLezzAi5fO6s67RAkHVKtsAMKHlXAsHFnAIkiVjdk4B9mH4Zz9G3SFhTez:r1iXAw2M7RAkHVKtsAMKHlXAsHFnAI7u
- TLSH T18C91724379514ED9D691BEF390EB4611E69AA34FB8003FD1B2C81288E906358CB379ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wiper.bat
Resource
win10v2004-20260911-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
wiper.bat
Resource
win11ltsc2024-20260911-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target wiper.bat
- Size 4KB
- SHA256 519cacd62b248b708e1b0587fc5327dc5e154d65d58b1e9aac3b4acf675ccdc5
- MD5 dfe5e4e38d0406284c6dba40f64844e0
- SHA1 e000cbe8d96274cb259ecf2b1574678056855134
- SHA512 0ca99c396ed0cb53491f73b9cc135e07e0b43f9f50c555f317553e02cd42de190caf2578d01d9aff53b841c2b48341480d316b120fed044f661380ada14b7cea
- SSDEEP 96:YdQmqNvLezzAi5fO6s67RAkHVKtsAMKHlXAsHFnAIkiVjdk4B9mH4Zz9G3SFhTez:r1iXAw2M7RAkHVKtsAMKHlXAsHFnAI7u
- TLSH T18C91724379514ED9D691BEF390EB4611E69AA34FB8003FD1B2C81288E906358CB379ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Modifies boot configuration data using bcdedit
Disables Task Manager via registry modification
Modifies Windows Firewall
Possible privilege escalation attempt
Disables service(s)
Modifies file permissions
Stops running service(s)
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
Drops file in System32 directory
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
2Service Execution
2Persistence
Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Hide Artifacts
2Hidden Files and Directories
1Ignore Process Interrupts
1Impair Defenses
2Disable or Modify System Firewall
1Modify Registry
1