Deobfuscation of Malware Delivered Through a .bat File, (Thu, Jul 20th)

I found a phishing email that delivered a RAR archive (password protected). Inside the archive, there was a simple .bat file (SHA256: 57ebd5a707eb69dd719d461e1fbd14f98a42c6c3dcb8505e4669c55762810e70) with the following name: SRI DISTRITAL - DPTO DE COBRO -SRI Informa-Deuda pendiente.bat. Its current VT score is only 1/59![1]

Article Link: https://isc.sans.edu/diary/rss/30048

1 post - 1 participant

Read full topic

archive bat bat file current deobfuscation email file malware name password phishing rar score sha256 simple