7b2beefef0e568d343e9807f8424cba1ca1177a8e52dfa5e60cc336f10100f60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2977319301295618020.bat
Size

2KB
Sample

240715-lpnl1azenj
MD5

fe54167d8ab625401449401e48f3d515
SHA1

b84da5b532c26ef0e1d7786249d57dcef707a5cf
SHA256

7b2beefef0e568d343e9807f8424cba1ca1177a8e52dfa5e60cc336f10100f60
SHA512

b5c37c9073cd652d57a9c15f721e2c804650048ca121eb84c0273231e98abd331d990f4e4a006ac1760a7c45a28eea3fe6c68b464999ede6c683cd976320bb1c

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2977319301295618020.bat
- Size
  
  2KB
- MD5
  
  fe54167d8ab625401449401e48f3d515
- SHA1
  
  b84da5b532c26ef0e1d7786249d57dcef707a5cf
- SHA256
  
  7b2beefef0e568d343e9807f8424cba1ca1177a8e52dfa5e60cc336f10100f60
- SHA512
  
  b5c37c9073cd652d57a9c15f721e2c804650048ca121eb84c0273231e98abd331d990f4e4a006ac1760a7c45a28eea3fe6c68b464999ede6c683cd976320bb1c
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2