32fee4260d6e973efc14b3c9d34e20b23fd605dcf5ef3ad39f3b8c830b389149 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

I01033740A5P46-copy.zip
Size

1016B
Sample

240719-h82q7ayfkl
MD5

3af477df606bd597dc6e30ead8f5b8d8
SHA1

4046a7504df339fd61398c66247f5664ebb142d4
SHA256

32fee4260d6e973efc14b3c9d34e20b23fd605dcf5ef3ad39f3b8c830b389149
SHA512

3aedbc91296494bafed20e6d0edeafe800b446a5a06fa0bc292f05f30a125347780b1829d1b93f199f9ce0ac644ba7e68d382b199a92088e31356f0201e02fb3

Score

8^/10

execution

Malware Config

Targets

- Target
  
  7539205282500410005.bat
- Size
  
  2KB
- MD5
  
  32c822f7bf6061e78c9d083a79948966
- SHA1
  
  0f734959438b21884ebe328ebd7e1057fd7ab1db
- SHA256
  
  57cae701ea5963af85f51f6b1cc1f928884dce23017a78be2795f2095e15d30f
- SHA512
  
  d46e9faf5bc69fe8e2788f78d8bc489db3bd9ed9d9e014814133fb8e40d6687392c75dc86511d9eff27c1fefdfc947edfd8e49a9c56ab56925d7df930f8ca29c
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2