f277f6fada1b7067687d943c857955f2d4c8e6eb685344d1708e9a1f73215bd2 | Triage

Sharing

General

Target

Rechnung 61279078.zip
Size

1015B
Sample

240719-h8dpcssclc
MD5

7062c36f4ca01cfc3b1e1474746e33bd
SHA1

b93bffc91a6d974d9e35688307f13cbd8dcd60a1
SHA256

f277f6fada1b7067687d943c857955f2d4c8e6eb685344d1708e9a1f73215bd2
SHA512

f6be5e266e572bbc7130c8c348fec76236508308e5c3ad8f5ef5a0f14074c13ef6f6bda3e5852e02cb4fc6021ae025aab41437d7c11e931edfdd4ec16f06a58d

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9779299133161129896.bat
- Size
  
  2KB
- MD5
  
  39605a70553a63fb0d4c3891b146ad35
- SHA1
  
  d4900152bd1920dc9cafb3ab27428562a57ee8b6
- SHA256
  
  cd033b13d964134a7b8719596f73ddacd0e712eb28deef8701166400b677c57e
- SHA512
  
  86e7803eccad0b8ea5959f7b8a20d357e1c5f014d550718ce37d88ff1dc7eb422304e2d610fd23e79b6ef9f4024aa398b00ec0ed70c36f7f1694f58fbb4b6f6e
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2