General

  • Target

    9344864021731388.bat

  • Size

    11KB

  • Sample

    240720-w829lsvhje

  • MD5

    60dc383ade3e1fa92a0dda43392af908

  • SHA1

    9fae84705e5547b23d27164d8bbeb3b7a2f2e3a7

  • SHA256

    7ecd170e3aec6cc28f8e10ec6b6b49834d4711cced03693be614570a6b38fcd7

  • SHA512

    e6b549b7e67546184d8ebb578d8fb1831d39e3a63136e7c3383f0047976cf1b917689d472fba50bdf80ae76865ed3ed821c680162ba66814bf3c7a4632761680

  • SSDEEP

    192:qIzRXO1tcgLMjtnHUNP2m8DA6NGxeVr9UkUkRpE4rgwS3a3iS0JH:pztO1tfLMx/4eVr9TPWS0t

Score
8/10

Malware Config

Targets

    • Target

      9344864021731388.bat

    • Size

      11KB

    • MD5

      60dc383ade3e1fa92a0dda43392af908

    • SHA1

      9fae84705e5547b23d27164d8bbeb3b7a2f2e3a7

    • SHA256

      7ecd170e3aec6cc28f8e10ec6b6b49834d4711cced03693be614570a6b38fcd7

    • SHA512

      e6b549b7e67546184d8ebb578d8fb1831d39e3a63136e7c3383f0047976cf1b917689d472fba50bdf80ae76865ed3ed821c680162ba66814bf3c7a4632761680

    • SSDEEP

      192:qIzRXO1tcgLMjtnHUNP2m8DA6NGxeVr9UkUkRpE4rgwS3a3iS0JH:pztO1tfLMx/4eVr9TPWS0t

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks