0bd56980ff3acc63885e377b02ca3cc663ab7d3a65ae0096266b7d3a176992cd | Triage

Sharing

General

Target

12540231692325216041.bat
Size

17KB
Sample

240719-1fep3avbqd
MD5

9aa8bd9c2728292f9bd449c855cd7397
SHA1

b3e0849e28a008246351c651a191361ba6630694
SHA256

0bd56980ff3acc63885e377b02ca3cc663ab7d3a65ae0096266b7d3a176992cd
SHA512

a7c4fd1904163346b6eb26c1e4737e12af92198665a04c3c9f3ae8bb561135ba4f47fc92b8cf506204a163b2d7fbcb336201f4c93dbc49c96707bbfffca2ab91
SSDEEP

384:dy3jqFiL9EWctJvkYvWfxZQW+uUKaNvi/+zCgsQxCaGr5rtr5rKN7A8lnmH+OfoB:dTFiL9GLky8oW+uUrlBLYaHNxlA3gB

Score

8^/10

execution

Malware Config

Targets

- Target
  
  12540231692325216041.bat
- Size
  
  17KB
- MD5
  
  9aa8bd9c2728292f9bd449c855cd7397
- SHA1
  
  b3e0849e28a008246351c651a191361ba6630694
- SHA256
  
  0bd56980ff3acc63885e377b02ca3cc663ab7d3a65ae0096266b7d3a176992cd
- SHA512
  
  a7c4fd1904163346b6eb26c1e4737e12af92198665a04c3c9f3ae8bb561135ba4f47fc92b8cf506204a163b2d7fbcb336201f4c93dbc49c96707bbfffca2ab91
- SSDEEP
  
  384:dy3jqFiL9EWctJvkYvWfxZQW+uUKaNvi/+zCgsQxCaGr5rtr5rKN7A8lnmH+OfoB:dTFiL9GLky8oW+uUrlBLYaHNxlA3gB
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2