General

  • Target

    39511625156493184.bat

  • Size

    5KB

  • Sample

    240721-wtdbya1ckj

  • MD5

    6c72f56c432183ebc57f4b33c25ead2b

  • SHA1

    80d179798b18ace82c93b053ea724bde83095739

  • SHA256

    e50df85650b0addbdb79ee4dd9987d5dc8b5da51811a997806affd330231e7e9

  • SHA512

    0ee801c5c471d688edaf94c273e964934f3f3732bc596ff2b16c0146155af9bcfb756a56e3ff2293a5777b10a8941d2af44e108721d5218e9d968e676c8dfda4

  • SSDEEP

    96:IpjQoaJvynTy/FFYD4JfucJWDXXkkkxVHHUXkkkxVHH5ixphWDQ9gDiUIMy7b+re:qUPoOTbwnkkk2kkklap+Q9gGUIM2b+q

Score
8/10

Malware Config

Targets

    • Target

      39511625156493184.bat

    • Size

      5KB

    • MD5

      6c72f56c432183ebc57f4b33c25ead2b

    • SHA1

      80d179798b18ace82c93b053ea724bde83095739

    • SHA256

      e50df85650b0addbdb79ee4dd9987d5dc8b5da51811a997806affd330231e7e9

    • SHA512

      0ee801c5c471d688edaf94c273e964934f3f3732bc596ff2b16c0146155af9bcfb756a56e3ff2293a5777b10a8941d2af44e108721d5218e9d968e676c8dfda4

    • SSDEEP

      96:IpjQoaJvynTy/FFYD4JfucJWDXXkkkxVHHUXkkkxVHH5ixphWDQ9gDiUIMy7b+re:qUPoOTbwnkkk2kkklap+Q9gGUIM2b+q

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks