edbf3fc0608a83d55e0187063cd52d1a87badfc5949569d926336c3f8a487aad | Triage

Sharing

General

Target

sd003264_20240521_092443_1418745501_2746.zip
Size

657B
Sample

240715-hlem5stbkm
MD5

65e91df31a688573cf2feb9435ab6976
SHA1

c6ba67f05c8c46b96d88327d7dfe512f3cdecb64
SHA256

edbf3fc0608a83d55e0187063cd52d1a87badfc5949569d926336c3f8a487aad
SHA512

38e1498c45566a73a47ddba47d6c38b7b256c100ccd7b751286bb0a10b79e72621f5302f8abd29831efc1474ca7917d3253a7e71c8903e3462b50586262d9d69

Score

8^/10

execution

Malware Config

Targets

- Target
  
  27200129073021614853.bat
- Size
  
  2KB
- MD5
  
  bcb0b1a32fea22bbd1470f8af0fa2120
- SHA1
  
  38f3d4acded760ffc4626c30d8b226a6e2585bc3
- SHA256
  
  33a2746f193fac4828326e84e515595b5207592db836c7f17bbb2a44fcee6466
- SHA512
  
  3caabff8a05a92bdb76f1644652c91cf78175b7e808919a5392a2d3aeee38902db8dd85526c319eede62a140edc9319bc7b224b40dcae65f381d02d1a1f0ece3
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2