afaff50326334e089f5e0f33bc43ea84cd802b6b41dfa5dc3a4d0061ca389479 | Triage

Sharing

General

Target

22535303383274924201.bat
Size

6KB
Sample

240721-jrgkcswfkf
MD5

ec5d37b66ca4be81a461510550470b65
SHA1

22a61381065122c6d2066b5f70807dce9fd64e94
SHA256

afaff50326334e089f5e0f33bc43ea84cd802b6b41dfa5dc3a4d0061ca389479
SHA512

c8c76ff97d68473f7d61a4b1bd3e9f571067078746448051bc00a67065b0fda86ab9b3a163b4f111dcd49dfb135381a63103cc093eb6f01f8f33ff46967bd2ea
SSDEEP

96:MhAPHmp1MTvB4fVJV0gOHnwwL35hp2q6NnNFq6NnNEEcyG7t0FVFiQCJmSsEx9i:MhvgMviRpWNdNfhDoQ3SzxY

Score

8^/10

execution

Malware Config

Targets

- Target
  
  22535303383274924201.bat
- Size
  
  6KB
- MD5
  
  ec5d37b66ca4be81a461510550470b65
- SHA1
  
  22a61381065122c6d2066b5f70807dce9fd64e94
- SHA256
  
  afaff50326334e089f5e0f33bc43ea84cd802b6b41dfa5dc3a4d0061ca389479
- SHA512
  
  c8c76ff97d68473f7d61a4b1bd3e9f571067078746448051bc00a67065b0fda86ab9b3a163b4f111dcd49dfb135381a63103cc093eb6f01f8f33ff46967bd2ea
- SSDEEP
  
  96:MhAPHmp1MTvB4fVJV0gOHnwwL35hp2q6NnNFq6NnNEEcyG7t0FVFiQCJmSsEx9i:MhvgMviRpWNdNfhDoQ3SzxY
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2