Overview

overview

8

Static

static

1

189153728912991.bat

windows7-x64

8

189153728912991.bat

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    189153728912991.bat

  • Size

    12KB

  • Sample

    240721-bdxqessbla

  • MD5

    c24e7a5e1a281f9a958994c81829e5bc

  • SHA1

    4c9ad07761abb902bb8f44aa6b26de27fc26e18a

  • SHA256

    2343efe5ed4041b69b08b4118df45ed701f297f80f4b61aefa5af1de0afd46b2

  • SHA512

    12611ec9bd3ef5e81ce92052ef3ff3990dc1956dacc00202986a3d7a795eaa413ecfee25817a1bcb83ae625a5451c0b69182d6f54ffaec36b7156a6e1ecc7c20

  • SSDEEP

    384:aGX0IUOJ2MCOCAlTPAPCSv98os637njfxa:+IUOJI98837n8

Score
8/10
execution

Malware Config

Targets

    • Target

      189153728912991.bat

    • Size

      12KB

    • MD5

      c24e7a5e1a281f9a958994c81829e5bc

    • SHA1

      4c9ad07761abb902bb8f44aa6b26de27fc26e18a

    • SHA256

      2343efe5ed4041b69b08b4118df45ed701f297f80f4b61aefa5af1de0afd46b2

    • SHA512

      12611ec9bd3ef5e81ce92052ef3ff3990dc1956dacc00202986a3d7a795eaa413ecfee25817a1bcb83ae625a5451c0b69182d6f54ffaec36b7156a6e1ecc7c20

    • SSDEEP

      384:aGX0IUOJ2MCOCAlTPAPCSv98os637njfxa:+IUOJI98837n8

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks