5755e51681dc4dd756938eb022aaa64389e45970a7bad48720dae02ab4076e50 | Triage

Sharing

General

Target

185433064283317791.bat
Size

2KB
Sample

240719-p4mj2avhpg
MD5

6c9c31b3cc14e99f689c656d5a36a3b1
SHA1

e7dc9fdf08e24b8bb099f17a59974227f1de3628
SHA256

5755e51681dc4dd756938eb022aaa64389e45970a7bad48720dae02ab4076e50
SHA512

b275a981604d07376d4f0313636362a0db81346f626c22dee84890874d86d8a51ad805e20373c9886868e11c73e4f04614b4aab80125f6bc05f40689cdb8ca22

Score

8^/10

execution

Malware Config

Targets

- Target
  
  185433064283317791.bat
- Size
  
  2KB
- MD5
  
  6c9c31b3cc14e99f689c656d5a36a3b1
- SHA1
  
  e7dc9fdf08e24b8bb099f17a59974227f1de3628
- SHA256
  
  5755e51681dc4dd756938eb022aaa64389e45970a7bad48720dae02ab4076e50
- SHA512
  
  b275a981604d07376d4f0313636362a0db81346f626c22dee84890874d86d8a51ad805e20373c9886868e11c73e4f04614b4aab80125f6bc05f40689cdb8ca22
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2