General

  • Target

    29056253305325789.bat

  • Size

    22KB

  • Sample

    240721-tajy9sxakm

  • MD5

    456ab0d180c6adad69daaf6ccd134509

  • SHA1

    4f79ae1afa2e6e0228caf954a2d47a5703d42acb

  • SHA256

    94b1dfd5ce5a07d205dce2056a585a1b4bde0c952ee2939f26fc7460e6fb4ece

  • SHA512

    af891203262f2b06c9e244e1bd0f924e9e92a2a09d990e0a6a23fc0f0dbb67bc6cb2dbc8e6db6d399050e98316d559574c504f9ab7a737c55de1428b9fbb0090

  • SSDEEP

    384:IqBUvz28CCMrTp2cZQjNIi9NyceFANHBtCVkSNXLbNIc3MvkcwGSzB74wK+NWITQ:IqQFz6p2IzimxFAHTCVDgM/eF+N/i80

Score
8/10

Malware Config

Targets

    • Target

      29056253305325789.bat

    • Size

      22KB

    • MD5

      456ab0d180c6adad69daaf6ccd134509

    • SHA1

      4f79ae1afa2e6e0228caf954a2d47a5703d42acb

    • SHA256

      94b1dfd5ce5a07d205dce2056a585a1b4bde0c952ee2939f26fc7460e6fb4ece

    • SHA512

      af891203262f2b06c9e244e1bd0f924e9e92a2a09d990e0a6a23fc0f0dbb67bc6cb2dbc8e6db6d399050e98316d559574c504f9ab7a737c55de1428b9fbb0090

    • SSDEEP

      384:IqBUvz28CCMrTp2cZQjNIi9NyceFANHBtCVkSNXLbNIc3MvkcwGSzB74wK+NWITQ:IqQFz6p2IzimxFAHTCVDgM/eF+N/i80

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks