724335bd5be230ad89416f7d89345dcf46448c6d5dc1e59a82dd1069b53afdc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20240628_RERG202498519.zip
Size

1KB
Sample

240719-n7288azeqj
MD5

4c4f865344dd5ae5f4bc8b99453804b8
SHA1

b4bb72c77b442ded9be640b07e774c11c2a87c3a
SHA256

724335bd5be230ad89416f7d89345dcf46448c6d5dc1e59a82dd1069b53afdc1
SHA512

b51c74c9b5baf7f625f6a2820c5c764298baf3ec845e5df066d45b8f65571584eee698cec14fa3ff4e74a2f24f528547afdb41b86b68f9ddf79a7969a1bfc343

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2966913859231632348.bat
- Size
  
  2KB
- MD5
  
  141def29dcb9636c3d9625980df53270
- SHA1
  
  6e8e9febb7412d74cd59e7a7502847325f22528c
- SHA256
  
  e5d7ddf957fc4d40319d93449be528ba15c063118631c33515e712f230acfb37
- SHA512
  
  a9643eda785a1077540f63ad8866a9d4e018a2c08d6b70592707de0e838b7291b54cc966946eb9e2b05b94a1811e6adfd8b7baa0f9842bcc12fb1e0ef8845ef6
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2