General

  • Target

    538597771797312130.bat

  • Size

    14KB

  • Sample

    240720-z9d5ysxaqc

  • MD5

    73fc72877f2a25321470943c3d02d70c

  • SHA1

    5b8ea3b72f9d06f7b1e4e6eba5898a9f6037a456

  • SHA256

    430d6060ee0bb50ce1df140de5ccfe464ade7280c8c75b28ea81d7ac9022ddf0

  • SHA512

    0770191f60f179dc2ab4c27952076d2a912e2ca19f5e1b5a1827bb3f47b4ff9e35efa8606cb70f5a05f771eefc7192f46c35ed1ff1ede161aa5ed2e4b005eb93

  • SSDEEP

    384:dEIzUPVZkoSKFDSFueSZwMUD/KQGS0x1Y5VN+xARCMf:dEOe/5SaDS98tS0x1Y5Zhf

Score
8/10

Malware Config

Targets

    • Target

      538597771797312130.bat

    • Size

      14KB

    • MD5

      73fc72877f2a25321470943c3d02d70c

    • SHA1

      5b8ea3b72f9d06f7b1e4e6eba5898a9f6037a456

    • SHA256

      430d6060ee0bb50ce1df140de5ccfe464ade7280c8c75b28ea81d7ac9022ddf0

    • SHA512

      0770191f60f179dc2ab4c27952076d2a912e2ca19f5e1b5a1827bb3f47b4ff9e35efa8606cb70f5a05f771eefc7192f46c35ed1ff1ede161aa5ed2e4b005eb93

    • SSDEEP

      384:dEIzUPVZkoSKFDSFueSZwMUD/KQGS0x1Y5VN+xARCMf:dEOe/5SaDS98tS0x1Y5Zhf

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks