Overview

overview

8

Static

static

1

12967256119807952.bat

windows7-x64

8

12967256119807952.bat

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    12967256119807952.bat

  • Size

    19KB

  • Sample

    240720-fswh5axfjk

  • MD5

    b2450a17df98ad171a89ad75f5b655b1

  • SHA1

    b1dc719e6c006179ca438a36d15848f5ce29fa5a

  • SHA256

    d39ea231849704e4a0067fb91932c0df0412a492f4d03ff204ef76402b20233e

  • SHA512

    19738460b88f7ee5fc7c7732487adaf26d84e70e6828d12061116e0a49075f52570cccc47f3538b20cf18d266733846f98adbb4a6dcbaa5a78e5c32148c10922

  • SSDEEP

    384:sU0JY+MM0EsrzC8McTyHXjhboow8mqqSZV8xp+8eR5C2cJe1NrH:mkM0EjZhcXq58p+8c5C2cg1tH

Score
8/10
execution

Malware Config

Targets

    • Target

      12967256119807952.bat

    • Size

      19KB

    • MD5

      b2450a17df98ad171a89ad75f5b655b1

    • SHA1

      b1dc719e6c006179ca438a36d15848f5ce29fa5a

    • SHA256

      d39ea231849704e4a0067fb91932c0df0412a492f4d03ff204ef76402b20233e

    • SHA512

      19738460b88f7ee5fc7c7732487adaf26d84e70e6828d12061116e0a49075f52570cccc47f3538b20cf18d266733846f98adbb4a6dcbaa5a78e5c32148c10922

    • SSDEEP

      384:sU0JY+MM0EsrzC8McTyHXjhboow8mqqSZV8xp+8eR5C2cJe1NrH:mkM0EjZhcXq58p+8c5C2cg1tH

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks