dfe8a7c64b6360adafeee07b8ae37a786adf372acdfeeea350b239fba5ebb541 | Triage

Sharing

General

Target

2591174582585022285.bat
Size

15KB
Sample

240721-wca59azaqn
MD5

314e3c6b925a2ebfc1750666580aa3d3
SHA1

1de940f47c031c9611fce741cf97d982de9ade4c
SHA256

dfe8a7c64b6360adafeee07b8ae37a786adf372acdfeeea350b239fba5ebb541
SHA512

64d53f9570f6c32a6a952b77092c69c6a4354ad750b406b56ebe9f7644568b15b585eefeed8ef418ba2ad863a442aa179c7ba99daff260e09fdd7a6e6c9a33ab
SSDEEP

384:x7ce4Muih/f+Vk5N0mLsXhYkStwZOq+aTTpRIg4n0PlvwffUEwffpLfEPzl:x7ce1J0rS/wZ2apRIr0Plv5EiLfq

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2591174582585022285.bat
- Size
  
  15KB
- MD5
  
  314e3c6b925a2ebfc1750666580aa3d3
- SHA1
  
  1de940f47c031c9611fce741cf97d982de9ade4c
- SHA256
  
  dfe8a7c64b6360adafeee07b8ae37a786adf372acdfeeea350b239fba5ebb541
- SHA512
  
  64d53f9570f6c32a6a952b77092c69c6a4354ad750b406b56ebe9f7644568b15b585eefeed8ef418ba2ad863a442aa179c7ba99daff260e09fdd7a6e6c9a33ab
- SSDEEP
  
  384:x7ce4Muih/f+Vk5N0mLsXhYkStwZOq+aTTpRIg4n0PlvwffUEwffpLfEPzl:x7ce1J0rS/wZ2apRIr0Plv5EiLfq
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2