General

  • Target

    1125826795137985055.bat

  • Size

    17KB

  • Sample

    240720-zfffxswgpg

  • MD5

    8627d7870b2b76b4ca72fc2cbf8415a5

  • SHA1

    626b08cf1f9c43918eca1d252a65c82f2072b49f

  • SHA256

    34b9312eaa7e583d22c0b38c34dbfab7682e0930fcaf2d7316bf4b5da49ae599

  • SHA512

    059f8d88ee8f9ab2ff3bdab225e93384e745d7b626281b2aa884591d3d6bc63de0a0546b9f537fcfbacaca06f7c8d61504c12c01a0c612635372ba0b541dcb64

  • SSDEEP

    384:JYg/UnqumOXZXcXfNEigmSnbraH5jJUZcCmU3X1w1csYD/s9z34XZUgzxafy:Jp/UqumM1cX1EigmSnbraH5jJUKCV36w

Score
8/10

Malware Config

Targets

    • Target

      1125826795137985055.bat

    • Size

      17KB

    • MD5

      8627d7870b2b76b4ca72fc2cbf8415a5

    • SHA1

      626b08cf1f9c43918eca1d252a65c82f2072b49f

    • SHA256

      34b9312eaa7e583d22c0b38c34dbfab7682e0930fcaf2d7316bf4b5da49ae599

    • SHA512

      059f8d88ee8f9ab2ff3bdab225e93384e745d7b626281b2aa884591d3d6bc63de0a0546b9f537fcfbacaca06f7c8d61504c12c01a0c612635372ba0b541dcb64

    • SSDEEP

      384:JYg/UnqumOXZXcXfNEigmSnbraH5jJUZcCmU3X1w1csYD/s9z34XZUgzxafy:Jp/UqumM1cX1EigmSnbraH5jJUKCV36w

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks