43586feeb7956d18ad808a4360c4665c6ed5617969b7aaf078932ae177bf616e | Triage

Sharing

General

Target

4504123.zip
Size

649B
Sample

240715-hlecdatbkl
MD5

9454d360870e18467d19bf75f1b623d1
SHA1

9430010a59a55ed27eb19426b87263f0464cc646
SHA256

43586feeb7956d18ad808a4360c4665c6ed5617969b7aaf078932ae177bf616e
SHA512

7503a336f8c73645753a688daa5e51c4e7afaacfda889afafb9c9c360aea6d55a5b7c98efdd5680b51f05e442a171a23a0b213277c009bf891a0d2dbd4cb7234

Score

8^/10

execution

Malware Config

Targets

- Target
  
  85752453306749416.bat
- Size
  
  2KB
- MD5
  
  ac73ab76502abf9b737af605bb0fa649
- SHA1
  
  c91e11ee0f600be4b83d7291126e7361a40d4409
- SHA256
  
  7ff7b0fd3764000e83fce6834080aa6db869c888f55c45bde0bd6247d3f4dbd6
- SHA512
  
  3d4a8a020f5318072df2e319c4ac380c3885068b2764221786727a0d850a3b08bda27418c787f04719b90838b2e0f5227fe23cd64a92026d78d6571161ab21cd
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2