21cff4842b0fe456ad9bdce81c6851efec771c4d5fe2cc4b96d79340084e0d47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2994528684740631331.bat
Size

2KB
Sample

240714-an8p1atgqa
MD5

26ea12d86515ee9f32a6ce43772e5fa2
SHA1

9256b430b2de699fc0e51651c98a29817c48e844
SHA256

21cff4842b0fe456ad9bdce81c6851efec771c4d5fe2cc4b96d79340084e0d47
SHA512

335e2ec9061f619044e66aa0a22bbf0d9a2e5040d5a7315ddf34895444d58ab69db5e8eb0819e959f2beb4f5172c40a549d5e16a532a6fa5610d66c627774194

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2994528684740631331.bat
- Size
  
  2KB
- MD5
  
  26ea12d86515ee9f32a6ce43772e5fa2
- SHA1
  
  9256b430b2de699fc0e51651c98a29817c48e844
- SHA256
  
  21cff4842b0fe456ad9bdce81c6851efec771c4d5fe2cc4b96d79340084e0d47
- SHA512
  
  335e2ec9061f619044e66aa0a22bbf0d9a2e5040d5a7315ddf34895444d58ab69db5e8eb0819e959f2beb4f5172c40a549d5e16a532a6fa5610d66c627774194
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2