f73625900de1b274fb47ffd1f36ebb484e0cd7118e0124c1a66760f0d790429f | Triage

Sharing

General

Target

312616074788226692.bat
Size

17KB
Sample

240720-yb9crswejd
MD5

64b2bd5485c7c5b36d7ec914b59c21f4
SHA1

5754df702591d8b8e300e9164af8e958e41c0ae8
SHA256

f73625900de1b274fb47ffd1f36ebb484e0cd7118e0124c1a66760f0d790429f
SHA512

24af5074ff98c42d42e89eb1a93f1cf740ad1e5e804188eb1f4a66aa67f9a36930b752e9a28815c370d99940a070791c37ec4b8d420be3b929425aebe9e0d4d9
SSDEEP

384:iYZNJJb/vj+I9IZ5sRgVH/zp0k4UjJ1Hmh0zrOTBkobbt:iWn8cIZ5l51l1HqT+6

Score

8^/10

execution

Malware Config

Targets

- Target
  
  312616074788226692.bat
- Size
  
  17KB
- MD5
  
  64b2bd5485c7c5b36d7ec914b59c21f4
- SHA1
  
  5754df702591d8b8e300e9164af8e958e41c0ae8
- SHA256
  
  f73625900de1b274fb47ffd1f36ebb484e0cd7118e0124c1a66760f0d790429f
- SHA512
  
  24af5074ff98c42d42e89eb1a93f1cf740ad1e5e804188eb1f4a66aa67f9a36930b752e9a28815c370d99940a070791c37ec4b8d420be3b929425aebe9e0d4d9
- SSDEEP
  
  384:iYZNJJb/vj+I9IZ5sRgVH/zp0k4UjJ1Hmh0zrOTBkobbt:iWn8cIZ5l51l1HqT+6
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2