02c51e814fa86458ff001de22fbdac40fe9bc061bad17f2d5b3413e94e294c49 | Triage

Sharing

General

Target

137666011097431048.bat
Size

17KB
Sample

240720-x81apaxglq
MD5

460cf189d3881e67b4beb1e60c25d62e
SHA1

9c62c41fd33fab8d8fc3dd812015c897b64f371e
SHA256

02c51e814fa86458ff001de22fbdac40fe9bc061bad17f2d5b3413e94e294c49
SHA512

19ef3e622e9ccf21e99582c57986e995a45d1cc0862a8ec6489d2ca23e84432fe73e75145f88b273a232ef84e46c395f5673d5c08d79dcc9ecef7ab4a80d5ad6
SSDEEP

384:HhsoPhYNe1LpdAY88KY88nc0h9oKUsXVsibks7LcURaC3EED:BsopSSdAY88KY88njcx4VPqURAg

Score

8^/10

execution

Malware Config

Targets

- Target
  
  137666011097431048.bat
- Size
  
  17KB
- MD5
  
  460cf189d3881e67b4beb1e60c25d62e
- SHA1
  
  9c62c41fd33fab8d8fc3dd812015c897b64f371e
- SHA256
  
  02c51e814fa86458ff001de22fbdac40fe9bc061bad17f2d5b3413e94e294c49
- SHA512
  
  19ef3e622e9ccf21e99582c57986e995a45d1cc0862a8ec6489d2ca23e84432fe73e75145f88b273a232ef84e46c395f5673d5c08d79dcc9ecef7ab4a80d5ad6
- SSDEEP
  
  384:HhsoPhYNe1LpdAY88KY88nc0h9oKUsXVsibks7LcURaC3EED:BsopSSdAY88KY88njcx4VPqURAg
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2