ec5b6f5f79caed84bfeeecb167c69c96496b2981ebe82b163bca460b43e3ff0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

438115840129752414.bat
Size

2KB
Sample

240715-gxx37a1hnp
MD5

79f3e4812b603eebe60954d608dd9eb5
SHA1

5c51a502340c0c4b9bf06ac45d632356de24c024
SHA256

ec5b6f5f79caed84bfeeecb167c69c96496b2981ebe82b163bca460b43e3ff0c
SHA512

587b65c52f0451aa43dcc3f8715c01d8e7ec40682bc558d009e4ceb105949bb70a4761a436282a70cd86b642e7fb1584fbbc6dedfac7d9fa00bd17034831f22c

Score

8^/10

execution

Malware Config

Targets

- Target
  
  438115840129752414.bat
- Size
  
  2KB
- MD5
  
  79f3e4812b603eebe60954d608dd9eb5
- SHA1
  
  5c51a502340c0c4b9bf06ac45d632356de24c024
- SHA256
  
  ec5b6f5f79caed84bfeeecb167c69c96496b2981ebe82b163bca460b43e3ff0c
- SHA512
  
  587b65c52f0451aa43dcc3f8715c01d8e7ec40682bc558d009e4ceb105949bb70a4761a436282a70cd86b642e7fb1584fbbc6dedfac7d9fa00bd17034831f22c
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2