7e962975f0654275c7b4355051ca725df2c894b02661ca3bd6824c737eccc1ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32239109752862427181.bat
Size

7KB
Sample

240721-sbaasatfnb
MD5

cffe1c8899f9384f12370b2f0c388791
SHA1

4190e088ce3d1eff9922fc172ca1cbd0874cd525
SHA256

7e962975f0654275c7b4355051ca725df2c894b02661ca3bd6824c737eccc1ae
SHA512

c23855fab4a8fe97a8431039167e60f02d042217d98af6dd44c2988f387cc61e18d9bf5070045c6c1e5cbba6528ebe11c928628ed16ebe93398abf6473200257
SSDEEP

96:ZpzamPZdr3r495YfgNajCXnsZLwRpihE1Fe2Iea2GcsvxaDPdu0oHnyqpWj8btHw:ZpNP/4uuptGrKDNqGKGGaq8s1E4mZ

Score

8^/10

execution

Malware Config

Targets

- Target
  
  32239109752862427181.bat
- Size
  
  7KB
- MD5
  
  cffe1c8899f9384f12370b2f0c388791
- SHA1
  
  4190e088ce3d1eff9922fc172ca1cbd0874cd525
- SHA256
  
  7e962975f0654275c7b4355051ca725df2c894b02661ca3bd6824c737eccc1ae
- SHA512
  
  c23855fab4a8fe97a8431039167e60f02d042217d98af6dd44c2988f387cc61e18d9bf5070045c6c1e5cbba6528ebe11c928628ed16ebe93398abf6473200257
- SSDEEP
  
  96:ZpzamPZdr3r495YfgNajCXnsZLwRpihE1Fe2Iea2GcsvxaDPdu0oHnyqpWj8btHw:ZpNP/4uuptGrKDNqGKGGaq8s1E4mZ
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2