b55d20cf1f88c4c4fa4d69af794be06b9e6b6dba6e982fe8bec625b594c0455a | Triage

Sharing

General

Target

4fd4d2abf8a6469fdf87b948fff88c86.bin
Size

6KB
Sample

240720-bp6gpstcnb
MD5

355296a545bec292fc655c79d1b4781b
SHA1

17ba184b7d084aae84ec0ea1d21131b332db345d
SHA256

b55d20cf1f88c4c4fa4d69af794be06b9e6b6dba6e982fe8bec625b594c0455a
SHA512

5a459a29a58d958576782efc2692e647b9bff29763e84524708c25eab56423bade3d7b41e960deb12f8c74dad5efd0f455863093e021704f2e4c26e49a401ef7
SSDEEP

192:la/CdLLIeMI8dinezy9difbC3lJjV6Xu4xUduA6UT:laadLrMKlmzcjVYlx4T

Score

8^/10

execution

Malware Config

Targets

- Target
  
  14214271933063625124.bat
- Size
  
  14KB
- MD5
  
  2133a748d31863f8db7ae862d4df63ed
- SHA1
  
  97139b6ffcbb5e6302c33d08cf6994ff9066833a
- SHA256
  
  725bf69de9d2f64ee1c621e361bf78257b8d3ba65dfc8b62d9db7c8823d82b9e
- SHA512
  
  369f8dc47cf1be1cae15295efdae04f57fd5913fd6ec1fae5f83d0cedd371e6295a360a878ac2e82c3e27969143b4e989a1a2168408b246d793e2e8df35aa75b
- SSDEEP
  
  384:gr8JWJQqQneAzqK40gb7YorR5XYxKuDLsZRau8:gYEQeA4DbsovATgZRau8
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2