Overview

overview

8

Static

static

1

2898271643604834.bat

windows7-x64

8

2898271643604834.bat

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2898271643604834.bat

  • Size

    18KB

  • Sample

    240722-ef8ggswcpd

  • MD5

    99cf2907e301f5e1286a48af0650a864

  • SHA1

    bf4e8a56f7d26ccce8f473bfc08cddf6c03320d1

  • SHA256

    5b2ece37bbf22c806f0d753312e1526e795ec3ce0059eaf45378f425d811ec11

  • SHA512

    9b3fc7c5dee5699680a1a331af724b61dc9fb7b2a5262497810201cd6bfa17eeb9292eead284cdbc0a2269c8fb52c0e859ba4e6148d48f11f7ab2ba081db6c16

  • SSDEEP

    384:OFvJoKyCI0wqN+J13ydZuAn/H5QyXQaOPHmjCI+JvL3731vt:tKy7pY+JCZuO/ZQTmjCbJvL3z1vt

Score
8/10
execution

Malware Config

Targets

    • Target

      2898271643604834.bat

    • Size

      18KB

    • MD5

      99cf2907e301f5e1286a48af0650a864

    • SHA1

      bf4e8a56f7d26ccce8f473bfc08cddf6c03320d1

    • SHA256

      5b2ece37bbf22c806f0d753312e1526e795ec3ce0059eaf45378f425d811ec11

    • SHA512

      9b3fc7c5dee5699680a1a331af724b61dc9fb7b2a5262497810201cd6bfa17eeb9292eead284cdbc0a2269c8fb52c0e859ba4e6148d48f11f7ab2ba081db6c16

    • SSDEEP

      384:OFvJoKyCI0wqN+J13ydZuAn/H5QyXQaOPHmjCI+JvL3731vt:tKy7pY+JCZuO/ZQTmjCbJvL3z1vt

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks