2db3d2a220ae4f1321b1a3c3dc07f83b3600e8018da0cd746f54279ca3d07476 | Triage

Sharing

General

Target

21629313822504324304.bat
Size

12KB
Sample

240719-l8xc9awamn
MD5

d59dea041a233af9dd0e5e1a342de342
SHA1

006b17de21ac79466c983dd4a6240d599111fc36
SHA256

2db3d2a220ae4f1321b1a3c3dc07f83b3600e8018da0cd746f54279ca3d07476
SHA512

3cc5c0420dd776ee3473cedbc766a14fee057ccba413182c18b3e8e767d6c47bc8099a2b33aeabb737d45e1a34b926c7dd9252769a49a3332585841bb4d4f1e7
SSDEEP

192:2ybcFwsPD5Rxozx3Pg9ypGKkOg8/KX7hTvY5ibmGWBneRiBTNdPG2:2ywwa5rozZPa264iFTFbVavVPv

Score

8^/10

execution

Malware Config

Targets

- Target
  
  21629313822504324304.bat
- Size
  
  12KB
- MD5
  
  d59dea041a233af9dd0e5e1a342de342
- SHA1
  
  006b17de21ac79466c983dd4a6240d599111fc36
- SHA256
  
  2db3d2a220ae4f1321b1a3c3dc07f83b3600e8018da0cd746f54279ca3d07476
- SHA512
  
  3cc5c0420dd776ee3473cedbc766a14fee057ccba413182c18b3e8e767d6c47bc8099a2b33aeabb737d45e1a34b926c7dd9252769a49a3332585841bb4d4f1e7
- SSDEEP
  
  192:2ybcFwsPD5Rxozx3Pg9ypGKkOg8/KX7hTvY5ibmGWBneRiBTNdPG2:2ywwa5rozZPa264iFTFbVavVPv
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2