c30a11af0e29f28223434f063b01b95788eccace4e0deb2a5dd4541c4ccc86b5 | Triage

Sharing

General

Target

2610330061303096434.bat
Size

20KB
Sample

240719-y5x7laxhjk
MD5

26cb7372596f6b4f13dd6e0de52724ef
SHA1

407dbb5bff48080ce9122f5b58ea62eccbdf3bcc
SHA256

c30a11af0e29f28223434f063b01b95788eccace4e0deb2a5dd4541c4ccc86b5
SHA512

8466cf87fe0c0706cadabe865f09e657c864a49e5cb86da76b83cf12b8199d70e1cda773cc0498f4927d30f39e33fb6f1ac909eb87ebd687b086588f3088ec98
SSDEEP

384:f/H0WfX6fhZpoCwLQGROitD1ZOuJT6b1zHelt98TML4MRNy:3H0ffbtwLQGHD1IuJT6b1belv84L48E

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2610330061303096434.bat
- Size
  
  20KB
- MD5
  
  26cb7372596f6b4f13dd6e0de52724ef
- SHA1
  
  407dbb5bff48080ce9122f5b58ea62eccbdf3bcc
- SHA256
  
  c30a11af0e29f28223434f063b01b95788eccace4e0deb2a5dd4541c4ccc86b5
- SHA512
  
  8466cf87fe0c0706cadabe865f09e657c864a49e5cb86da76b83cf12b8199d70e1cda773cc0498f4927d30f39e33fb6f1ac909eb87ebd687b086588f3088ec98
- SSDEEP
  
  384:f/H0WfX6fhZpoCwLQGROitD1ZOuJT6b1zHelt98TML4MRNy:3H0ffbtwLQGHD1IuJT6b1belv84L48E
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2