3cc6a1b5de664898153fd6a8299526ff2f7be79b9e3afffe09023a80743eed20 | Triage

Sharing

General

Target

207866629169791510.bat
Size

22KB
Sample

240719-dnn75szejq
MD5

00624989071363866be6a8a8f9b5b289
SHA1

04bd1d01ef04f2d66225cba07d510c811cd7777e
SHA256

3cc6a1b5de664898153fd6a8299526ff2f7be79b9e3afffe09023a80743eed20
SHA512

b55f607322c477f6ba57dee832414a9d4af4fe640171144592652dce6839445afd62a456f005ccfe2220515d9eedf0bc814bb3d120e0c681a53182ece6ac0e04
SSDEEP

384:5NaywJNi1fDBqabnp5E5tOac1DjXlY+K7n7FHKmEbw0HsEUj3CnH+b/PSZ57w:iywI1rbnpS5taXq+En0Jbw5EOSnHm/Pn

Score

8^/10

execution

Malware Config

Targets

- Target
  
  207866629169791510.bat
- Size
  
  22KB
- MD5
  
  00624989071363866be6a8a8f9b5b289
- SHA1
  
  04bd1d01ef04f2d66225cba07d510c811cd7777e
- SHA256
  
  3cc6a1b5de664898153fd6a8299526ff2f7be79b9e3afffe09023a80743eed20
- SHA512
  
  b55f607322c477f6ba57dee832414a9d4af4fe640171144592652dce6839445afd62a456f005ccfe2220515d9eedf0bc814bb3d120e0c681a53182ece6ac0e04
- SSDEEP
  
  384:5NaywJNi1fDBqabnp5E5tOac1DjXlY+K7n7FHKmEbw0HsEUj3CnH+b/PSZ57w:iywI1rbnpS5taXq+En0Jbw5EOSnHm/Pn
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2