543dc8568ed363064ef36deb0474d1134438f3ebfc6025bc8430fc6eab0e84ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20240624_ABAB2024100689.zip
Size

655B
Sample

240714-vt88yazdqq
MD5

e2b4d092fd49680a205d32a89e1ba813
SHA1

a1df0aeed6377fea9280fdb7cfaa096859fee06b
SHA256

543dc8568ed363064ef36deb0474d1134438f3ebfc6025bc8430fc6eab0e84ec
SHA512

125c573700581b0de87b9c41195541917d18d2fcafada63f1a53ee8dd8ecc6da7d6d39ec6ee92a12b6a07d15ed8068647358022eff65163bdd060044ef2577ba

Score

8^/10

execution

Malware Config

Targets

- Target
  
  293391956435161268.bat
- Size
  
  2KB
- MD5
  
  ab7dd06b5b701267bc2f55b42b2a8386
- SHA1
  
  33984bb06d2cd2bf933927cd4a05234bb95fec82
- SHA256
  
  d866bb76068c3453f5806d4e81dd5bca8fa56c351ca724fa10f349e6170f0cb6
- SHA512
  
  4c68f89617968463eb4237f0bb145bcf2538d289460f87da6de0c754e6344ca3bcf99d93e4b734a390fae1ef009e811c612a522dbfa3d672de563308befa4713
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2