2677e941c6ff72245fb64411923d5cc82d5b6a20608e3f67796709ca1a047822 | Triage

Sharing

General

Target

1542615.zip
Size

654B
Sample

240714-wl77catfld
MD5

7fe947354b0128eab5e39af9865c74e0
SHA1

baf8135a5705fe343442f8651fa72111cd0936b4
SHA256

2677e941c6ff72245fb64411923d5cc82d5b6a20608e3f67796709ca1a047822
SHA512

559d5dc7b339b551dd454c865b90890d958ca9164e28dc9b284c418de8f998ad9df7bfb3d55398e021c83f52a5c185faaa391c1b4e2769a67b5caf4b032b89e4

Score

8^/10

execution

Malware Config

Targets

- Target
  
  20856219261922925126.bat
- Size
  
  2KB
- MD5
  
  975569c599b89bf0b0f2ddcc2d90a74e
- SHA1
  
  8cc6133ffcef4c19b00380e531eb885330406c38
- SHA256
  
  ecc04026d57e69866f0e9101829258287e8c88a3eeaf2ffcc066f80d31258ad9
- SHA512
  
  b98ad6ccbd4ff121bb6e1cdc19cb6edfef6d065eeba4e6682b6d09a65135964097928ea04138b0a1b00f6cfaa56ac83c26cdffc9183dd1ede3f733afe2eb5fb9
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2