Overview

overview

8

Static

static

1

3255122537...92.bat

windows7-x64

8

3255122537...92.bat

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    C0R546090T156228244.eml

  • Size

    8KB

  • Sample

    240712-hsqc8ashnl

  • MD5

    a6682a2918cfa486145770eedb31dcc8

  • SHA1

    4101fd6983c5f708e9ac1dc9405244cf0f41ab26

  • SHA256

    78e0670823211ef4daf60b7eee359b6f93e229a9881e8164ff4485ec64b9d8aa

  • SHA512

    52c9d6c9b17d2f79ad401fc2661761a4a04baf92a489ab68c94f23ac95d56fb7bba6ce70cf14bf633771c7611db14756268cec7bd77fa88e24a0a23e63bc961d

  • SSDEEP

    192:ipa/LQX60oIBUKz/qShCzlKpxW4R1BI0XDC9ln+iI:ipa/LQK7xzlKXPR1PX6e

Score
8/10
execution

Malware Config

Targets

    • Target

      32551225371897822792.bat

    • Size

      2KB

    • MD5

      9489568f931bff82921123c6c806f563

    • SHA1

      7632310c416d7bcca269590f9e00d9bbbbb3ba76

    • SHA256

      acea86022a2a36c2ba99e7c064b0aff13269c07028465247da72b0a946d7d7b9

    • SHA512

      c4329a7fd0d76bc3b87c4aba59919a2905188957e129631d7af856a7687109b8b35efd29e333f753f464f7e55215d591c04075b881b69f0df01894e8ef14741a

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks