060ef4ff2deca7c0d5990a688e6b7959c31ccfaedbbbfd107345f2a7835b54db | Triage

Sharing

General

Target

Rechnung 70241530.zip
Size

656B
Sample

240715-hsqnzsterq
MD5

cef86187d2c60d30245541231977c14d
SHA1

b381362ec5e6698d8c3a7618f2e44fbfa1eedcc6
SHA256

060ef4ff2deca7c0d5990a688e6b7959c31ccfaedbbbfd107345f2a7835b54db
SHA512

a01b2be5add5be476c880eb778a4ed121e7177480855ae5af062471dab9736e782818b72c95411445bde0aec7963d24ab2ce79d7aea519983701eb29fbfc7f65

Score

8^/10

execution

Malware Config

Targets

- Target
  
  12567224832514716799.bat
- Size
  
  2KB
- MD5
  
  d1beb6ad5184c81cd1503ef9676c04c6
- SHA1
  
  19382c776c732c6a49ab298f102aadf5d5622a40
- SHA256
  
  d502b2ea16b3fe9feff5c1234a63279d576d927eec6ae85502b5c5b1854e8289
- SHA512
  
  f60270f36e0e81ec981bc36342bc30f009051c52bcec8ed65dc70f3f4cf1444c998b79416666bcbc2cdefdd37b46fb2f06ae96f8178efcbd058aca8668870947
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2