884cf1647d77c51bc1a1e949dd771db36268f5a99ade6ea8ed855f012f28fbc7 | Triage

Sharing

General

Target

2438777731937615688.bat
Size

17KB
Sample

240720-yax84swdph
MD5

606a1a5e5bd7f12afe19126107ae58a8
SHA1

5481eee1abb2b712f6745a28d66d5026e8033286
SHA256

884cf1647d77c51bc1a1e949dd771db36268f5a99ade6ea8ed855f012f28fbc7
SHA512

c2b4e179cf03b05480bd80db2e01474a43084670285048b462bc80f5db0f4a4ef5ccb35d7eae653d8ce8686e07d3b7884fb2e42fa35edf29cccf9516a3eb062b
SSDEEP

192:hgb5J8bH/1Pt5COiA525NRGJwuBYtaFhhOEOlQHFZJuaUvuOmCAeTjmb3iaoMkkN:Gb5CH/htqi0RGeta3OqFcmCAeTjs4kXd

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2438777731937615688.bat
- Size
  
  17KB
- MD5
  
  606a1a5e5bd7f12afe19126107ae58a8
- SHA1
  
  5481eee1abb2b712f6745a28d66d5026e8033286
- SHA256
  
  884cf1647d77c51bc1a1e949dd771db36268f5a99ade6ea8ed855f012f28fbc7
- SHA512
  
  c2b4e179cf03b05480bd80db2e01474a43084670285048b462bc80f5db0f4a4ef5ccb35d7eae653d8ce8686e07d3b7884fb2e42fa35edf29cccf9516a3eb062b
- SSDEEP
  
  192:hgb5J8bH/1Pt5COiA525NRGJwuBYtaFhhOEOlQHFZJuaUvuOmCAeTjmb3iaoMkkN:Gb5CH/htqi0RGeta3OqFcmCAeTjs4kXd
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2