fe058b4127427e79d6eef9dcb97fd2d0aae0964e033bcfac43b67a51ddd4a0c9 | Triage

Sharing

General

Target

fe058b4127427e79d6eef9dcb97fd2d0aae0964e033bcfac43b67a51ddd4a0c9.bat
Size

2KB
Sample

240713-qh5n6asclm
MD5

ba1fee914528c6a5fe382d45b5ad9e84
SHA1

b27aa2ce3bf2dcea79ca1a01d55cf05d58c09068
SHA256

fe058b4127427e79d6eef9dcb97fd2d0aae0964e033bcfac43b67a51ddd4a0c9
SHA512

a133330ca04093b44ad2fba1efd61461f46c5d43e3f28f7edcc50cfc16175b44c923ddb3d342f7f6b1c301e81a8a893e5824d740d44c27dab6994f9dd2c6dc59

Score

8^/10

execution

Malware Config

Targets

- Target
  
  fe058b4127427e79d6eef9dcb97fd2d0aae0964e033bcfac43b67a51ddd4a0c9.bat
- Size
  
  2KB
- MD5
  
  ba1fee914528c6a5fe382d45b5ad9e84
- SHA1
  
  b27aa2ce3bf2dcea79ca1a01d55cf05d58c09068
- SHA256
  
  fe058b4127427e79d6eef9dcb97fd2d0aae0964e033bcfac43b67a51ddd4a0c9
- SHA512
  
  a133330ca04093b44ad2fba1efd61461f46c5d43e3f28f7edcc50cfc16175b44c923ddb3d342f7f6b1c301e81a8a893e5824d740d44c27dab6994f9dd2c6dc59
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2