1409b6f9cfa72641102b2714eca5ed736ac6d2ad15a8a9b90f796d15dfe71cbe | Triage

Sharing

General

Target

8873153963217815223.bat
Size

2KB
Sample

240714-zlt69swelc
MD5

f2da29cd0fe5b748716ed3be26c35736
SHA1

3b1f6d5bf678fce5842be25839e56d83b6e9f1d5
SHA256

1409b6f9cfa72641102b2714eca5ed736ac6d2ad15a8a9b90f796d15dfe71cbe
SHA512

0214368f1a5ccebff7c2353bee1600f555e9119304a0680b97510fa60ff6dbad199746f5d331d1a7b8382296d39525ff223ab6a006a6ef2878505f5fc6e78f6d

Score

8^/10

execution

Malware Config

Targets

- Target
  
  8873153963217815223.bat
- Size
  
  2KB
- MD5
  
  f2da29cd0fe5b748716ed3be26c35736
- SHA1
  
  3b1f6d5bf678fce5842be25839e56d83b6e9f1d5
- SHA256
  
  1409b6f9cfa72641102b2714eca5ed736ac6d2ad15a8a9b90f796d15dfe71cbe
- SHA512
  
  0214368f1a5ccebff7c2353bee1600f555e9119304a0680b97510fa60ff6dbad199746f5d331d1a7b8382296d39525ff223ab6a006a6ef2878505f5fc6e78f6d
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2