d4432eddaa65b13e0daaa839476a5374eb8d5bb1c23d673764deaa0a7e72e852 | Triage

Sharing

General

Target

VR202408292.zip
Size

1014B
Sample

240719-hsab1a1fja
MD5

09ab786d7eb090af1be99f697d9e8849
SHA1

2923bce63766e46334d7e260583217ee8c6e088d
SHA256

d4432eddaa65b13e0daaa839476a5374eb8d5bb1c23d673764deaa0a7e72e852
SHA512

2f07e23ae9590a09c84ea5a5d0b951e252379527e67bbd91ae0ddb72c1c6291eb63dfb31e40267e2975e036fe66e8c0bab320bcfb17620def9e04f825d8f0600

Score

8^/10

execution

Malware Config

Targets

- Target
  
  21348315842434132741.bat
- Size
  
  2KB
- MD5
  
  727c8f0fc8782d849bcf2fcbaa38acce
- SHA1
  
  411325e4cbe91bc4ae15914fff38eb8c2d32c90b
- SHA256
  
  5c54e6be00c2bdee8c704c026d20e5504c2c805aa99133e29b6a5799ab11b4c6
- SHA512
  
  3f82ed587271c3e91b60bceb3406f7ef663f6b9a59553d369633d10456bd6dadb68843a7a4ca81c9084b08dd4c0e442c5a82c20ff2d003e0c69a0302a7a74424
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2