524f6c7cd0469eafbf612f8a26ec7df8abeeb2289a2fc4bdc5232ccec6c54da6 | Triage

Sharing

General

Target

RP24916095.zip
Size

661B
Sample

240714-xhx3msserj
MD5

8ec8f3fdc0a7b0bcc8f0303048ca77c6
SHA1

f3e04329223d1d894427a7dffcf80125d25cead8
SHA256

524f6c7cd0469eafbf612f8a26ec7df8abeeb2289a2fc4bdc5232ccec6c54da6
SHA512

e8d79bfa2ee5de6001548844885e135252e7742abfbb519f2fad1351e2b64330b69e5177b46a7c6cb58c025871bf46149366c368186c6993526d2f1bcf28b596

Score

8^/10

execution

Malware Config

Targets

- Target
  
  28410314442699218576.bat
- Size
  
  2KB
- MD5
  
  9b2b8e0c079b283d40b42a621ec7e4f3
- SHA1
  
  23c6e7d829f977c521171bb3fc8f38fe5e0707e3
- SHA256
  
  52768ed721cd41910dcb85ffe2f4a0b4d4983bbc819cd6983813336682369884
- SHA512
  
  67b554c92b72da3fa5e42acaae005f863a0eb94c29e875f340410ca0b84587a45f6d52bd080df28b51f3b19471b049922dc7aa25fd68e0c0af5ae669994e57ba
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2