Overview

overview

8

Static

static

1

1131932727...86.bat

windows7-x64

8

1131932727...86.bat

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1131932727178716886.bat

  • Size

    14KB

  • Sample

    240721-f3q2dswhpl

  • MD5

    ad9357876c06a3c87d17d8ddf81809f9

  • SHA1

    f0fa77b80521dc3026c1bfeaa8e3402c39cd57f5

  • SHA256

    09222ca17e7e9b487071f25eaca543d10ec8f9342e1b6062317cf78da703bab9

  • SHA512

    30ba8e5456a3177b983e1c39ec5a2f285423976c593b15c2acb55b3e02f4984f80aaa7ca1a4a31908fc5c9a1b96997b3c605128556c2768d422d7bbf5474a5fd

  • SSDEEP

    384:CfVr57FLgiKyRcune2K/ICM0qIpEtuUfRCoR8:k3628Ij0qbwoR8

Score
8/10
execution

Malware Config

Targets

    • Target

      1131932727178716886.bat

    • Size

      14KB

    • MD5

      ad9357876c06a3c87d17d8ddf81809f9

    • SHA1

      f0fa77b80521dc3026c1bfeaa8e3402c39cd57f5

    • SHA256

      09222ca17e7e9b487071f25eaca543d10ec8f9342e1b6062317cf78da703bab9

    • SHA512

      30ba8e5456a3177b983e1c39ec5a2f285423976c593b15c2acb55b3e02f4984f80aaa7ca1a4a31908fc5c9a1b96997b3c605128556c2768d422d7bbf5474a5fd

    • SSDEEP

      384:CfVr57FLgiKyRcune2K/ICM0qIpEtuUfRCoR8:k3628Ij0qbwoR8

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks