c6e45ec6db404086fc110ff233cfa01dcae6319fee5a7187a4fd00d35086b4fd | Triage

Sharing

General

Target

I01033740A5P46-copy.zip
Size

1KB
Sample

240719-phtffstgpe
MD5

0b9e0a8f617bdead2406f96b6626a65a
SHA1

045ed86b0c288b0db25b18f88e3c8f53e43d89a6
SHA256

c6e45ec6db404086fc110ff233cfa01dcae6319fee5a7187a4fd00d35086b4fd
SHA512

fda891c9b57eecbabb8d7bbf848efc94517314fe482384f383e16959252f93f9eac6aec671470db9836475bd36257a24206259a298ad449762f6590cc344fa2e

Score

8^/10

execution

Malware Config

Targets

- Target
  
  525214159299812324.bat
- Size
  
  2KB
- MD5
  
  322cd7322e9f2393da333b7e15b27131
- SHA1
  
  372bd2fe842b9219ed617f82a0f768d02f9c3894
- SHA256
  
  4c0d6e2a35bc3eed3174ac0db72a8343d6574e3868b7879e324bcb9fca848f23
- SHA512
  
  06dc522da690d9696f494dde3213850a25e9143dd453ae78782f4f276b3081028d64d770f95c90c74c677b703e53f6db7170e3a3f83d3db85ae70960824b9f25
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2