General

  • Target

    ce0ac37cf9c24a5a5527149f1e34e2a0.bin

  • Size

    7KB

  • Sample

    240719-d3rltatgmf

  • MD5

    d46b8fda27d383c153c50bc56174242b

  • SHA1

    b1aacf87e25a494560178d990c26a64e68d3aaa3

  • SHA256

    18f1bd8f785304935f165223481adaacbee21a85f294ced9aa8d4aa53f23177d

  • SHA512

    3a32541c1c623223539fba904d4bf6a815799fa2e4abdbd146f48a76cb1a7df24ecba0d4a95187bf96a6e0b40290d32845b1a9abef49ba6cca39dea2da40f830

  • SSDEEP

    96:NOFhoB/r/GnhmL0Gz7oq0zZnQgNd6ysyCF0pb9kG3jbStd82XBoWmDHQjOTWUD55:NyyosLb7KHNd6wCcpDjuHoWmyOT3p40L

Score
8/10

Malware Config

Targets

    • Target

      9a6242ef5182a2d4fb5827d12443ca9456c7279a64ebf570a9f9c821e26518db.bat

    • Size

      16KB

    • MD5

      ce0ac37cf9c24a5a5527149f1e34e2a0

    • SHA1

      a4d0fd98848dc2c796c5a31658dc99b589fa26b3

    • SHA256

      9a6242ef5182a2d4fb5827d12443ca9456c7279a64ebf570a9f9c821e26518db

    • SHA512

      172de7b43cee00e9234178ae84f9f3240cc14191a9837eda5d631609e7e286635ed29ab81805dfc929bfb847b3381e73de691fb9bb5db01da7b338516fe7513f

    • SSDEEP

      384:Xz9qBHwPuI0miD120Tt0WxKJPmmCzTw+uXFktL:XzgovK0WcJPmHzy4

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks