94bea109e5b6b79bffb9caa3874f9a9e15717967373e3bf2ed29804f5a1d42b0 | Triage

Sharing

General

Target

132237739213015782.bat
Size

2KB
Sample

240714-t38s4a1cjd
MD5

7ac71dd44a79812c3471ddb494ca7614
SHA1

49a3044c2c024aaa3effac3db3c0af7a83d919c3
SHA256

94bea109e5b6b79bffb9caa3874f9a9e15717967373e3bf2ed29804f5a1d42b0
SHA512

cbe1a968f634a3a342b2fb3fb0503da3b6548e337910ce24196baff98541ae52fb618e64d413b9cfff399797f1a9c19999aadebfa815ef985d58e1f3bc043d88

Score

8^/10

execution

Malware Config

Targets

- Target
  
  132237739213015782.bat
- Size
  
  2KB
- MD5
  
  7ac71dd44a79812c3471ddb494ca7614
- SHA1
  
  49a3044c2c024aaa3effac3db3c0af7a83d919c3
- SHA256
  
  94bea109e5b6b79bffb9caa3874f9a9e15717967373e3bf2ed29804f5a1d42b0
- SHA512
  
  cbe1a968f634a3a342b2fb3fb0503da3b6548e337910ce24196baff98541ae52fb618e64d413b9cfff399797f1a9c19999aadebfa815ef985d58e1f3bc043d88
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2