Author: lomar

lomar


A malicious batch file has been discovered that downloads and executes files associated with the Laplas Clipper malware. Analyze this batch file to understand its behavior and help us investigate its activities.

What command is used to prevent the command echoing in the console?

@echo off

Which tool is used to download a file from a specified URL in the script?

bitsadmin

What is the priority set for the download operation in the script?

FOREGROUND

Which command is used to start localization of environment changes in the script?

setlocal

Which IP address is used by malicious code?

193.169.255.78

What is the name of the subroutine called to extract the contents of the zip file?

UnZipFile

Which command attempts to start an executable file extracted from the zip file?

start "" "FW-APGKSDTPX4HOAUJJMBVDNXPOHZ.PDF.exe"p

Which scripting language is used to extract the contents of the zip file?

VBScript