General

  • Target

    20240628_RERG202498519.zip

  • Size

    656B

  • Sample

    240715-hsqc8aterk

  • MD5

    a5d2a29d44a4ffe2d597b0eef7011501

  • SHA1

    d28c740213f1c5bfc16a165fadfafe2f14aaa61f

  • SHA256

    c774af0cb508034264d77999872e58a2d3430bda5ae417f5625337482080f2b0

  • SHA512

    43bead3b9bc98a988a6f23576d0c6c12ca6063a419ce216a10f7eb01e8a325e9ea30843f9e2e0ca31a4fbcd57066f7031da9fac7d1572237e54d0f4e6b2d9803

Score
8/10

Malware Config

Targets

    • Target

      1201731091222355642.bat

    • Size

      2KB

    • MD5

      400b5c03e03a62150aaf0bdb0f0c862b

    • SHA1

      06c6519201669149f3515d950081aab200d52279

    • SHA256

      576bce7c39b01c5c5f80c628a9f24c22215bde530aeee574eea458459e16b526

    • SHA512

      2d0e05977760dde4bf636507d6d44d008d4711a23df6b0941c8d9cc072c3b13c76f50637d1404710f87c09f623dbe8906f3dda8eda8f5cc5c98dcbeb707a98dc

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks