03fff5c324b61d01dd73a3e077cf8f85040c1cf83c558a16d82ff3f62eca1751 | Triage

Sharing

General

Target

7070279921404218102.bat
Size

10KB
Sample

240719-r8ar5swgml
MD5

a34c69ae830817bc5df379aefce775d1
SHA1

9646f93a01aabffbace5d48a26f03d915a33ac32
SHA256

03fff5c324b61d01dd73a3e077cf8f85040c1cf83c558a16d82ff3f62eca1751
SHA512

2639e96cde0f221e9bcd95e7aa49277a5e58bc8f69999c3fd8c24253db3d38aa4065997e62978ace5ab417bab235443af99a0722f4d3c13419e1aee1b288de2e
SSDEEP

192:4ADoaFE2hA+SnxJBSd1mRJ7D2SBIAjvMRT7ZWMn01Sx+:985G5Sxek3pxjURT7j01O+

Score

8^/10

execution

Malware Config

Targets

- Target
  
  7070279921404218102.bat
- Size
  
  10KB
- MD5
  
  a34c69ae830817bc5df379aefce775d1
- SHA1
  
  9646f93a01aabffbace5d48a26f03d915a33ac32
- SHA256
  
  03fff5c324b61d01dd73a3e077cf8f85040c1cf83c558a16d82ff3f62eca1751
- SHA512
  
  2639e96cde0f221e9bcd95e7aa49277a5e58bc8f69999c3fd8c24253db3d38aa4065997e62978ace5ab417bab235443af99a0722f4d3c13419e1aee1b288de2e
- SSDEEP
  
  192:4ADoaFE2hA+SnxJBSd1mRJ7D2SBIAjvMRT7ZWMn01Sx+:985G5Sxek3pxjURT7j01O+
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2