a09d792b872ac776ae90617be23247d50e3298cd0712596009557f45c269b637 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40262045170696204.bat
Size

2KB
Sample

240715-ceyvjssgmp
MD5

fd28c034c5eb0f5f55d92b43c5650555
SHA1

47d514c89d47ed910930d30ea59cec35ff61def6
SHA256

a09d792b872ac776ae90617be23247d50e3298cd0712596009557f45c269b637
SHA512

d6024f5208fabae19f8e4848b73fd9c6ee6c21550bfcbafe7426897e2f6cef301738183500b9d4d1bf12037fb1df678a7af0cba0dcf35bd7fae6879487e7c1aa

Score

8^/10

execution

Malware Config

Targets

- Target
  
  40262045170696204.bat
- Size
  
  2KB
- MD5
  
  fd28c034c5eb0f5f55d92b43c5650555
- SHA1
  
  47d514c89d47ed910930d30ea59cec35ff61def6
- SHA256
  
  a09d792b872ac776ae90617be23247d50e3298cd0712596009557f45c269b637
- SHA512
  
  d6024f5208fabae19f8e4848b73fd9c6ee6c21550bfcbafe7426897e2f6cef301738183500b9d4d1bf12037fb1df678a7af0cba0dcf35bd7fae6879487e7c1aa
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2