Overview

overview

8

Static

static

1

1.bat

windows7-x64

1

1.bat

windows10-1703-x64

8

1.bat

windows10-2004-x64

5

1.bat

windows11-21h2-x64

3

Resubmissions

01-05-2024 16:21

240501-ttyxjaba41 10

01-05-2024 12:38

240501-pvah4seh9x 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.bat

  • Size

    42B

  • Sample

    240501-pvah4seh9x

  • MD5

    781f882af4fc7061ede473ee5d75e17c

  • SHA1

    41b54f6c7bbb19327bbf88880ff3a3010e7af6a6

  • SHA256

    268b9b8e07f7c0f7b895de751634cae25e5189aa33ec4da924b243adda41186c

  • SHA512

    9471507eb329ea7050e2da756b8af58dbe3a63d7f0a707d24a6416565cb505d2967046faaeb7d45bce98e65468b95203725b09eebe3310ba589a6c38c9806697

Score
8/10
discoveryevasion

Malware Config

Targets

    • Target

      1.bat

    • Size

      42B

    • MD5

      781f882af4fc7061ede473ee5d75e17c

    • SHA1

      41b54f6c7bbb19327bbf88880ff3a3010e7af6a6

    • SHA256

      268b9b8e07f7c0f7b895de751634cae25e5189aa33ec4da924b243adda41186c

    • SHA512

      9471507eb329ea7050e2da756b8af58dbe3a63d7f0a707d24a6416565cb505d2967046faaeb7d45bce98e65468b95203725b09eebe3310ba589a6c38c9806697

    Score
    8/10
    discoveryevasion

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks