c63d0c9c9a7284cc19b3270454a4867e55cf3c01129bf7d16f66242503d3ed72 | Triage

Sharing

General

Target

3253420499441812724.bat
Size

16KB
Sample

240722-w1a56a1ajc
MD5

064727b58d9d7b234084791a75a01e94
SHA1

067d8b83059678a27fa853bf840335caac74e70f
SHA256

c63d0c9c9a7284cc19b3270454a4867e55cf3c01129bf7d16f66242503d3ed72
SHA512

4dda01651bc674cbb8068626a211c0c552014c3d9fdacda1c67dc69710d0c96b5a8acfdde7c07271962f311f29e52e9dcdee418d8d17e0c84fc08b0ee797690a
SSDEEP

384:KK+3DTuCjOhx1ULZkKhGSpl+GvR6QhRFO/h:KKYDljU1ULGsGSpPvR6aop

Score

8^/10

execution

Malware Config

Targets

- Target
  
  3253420499441812724.bat
- Size
  
  16KB
- MD5
  
  064727b58d9d7b234084791a75a01e94
- SHA1
  
  067d8b83059678a27fa853bf840335caac74e70f
- SHA256
  
  c63d0c9c9a7284cc19b3270454a4867e55cf3c01129bf7d16f66242503d3ed72
- SHA512
  
  4dda01651bc674cbb8068626a211c0c552014c3d9fdacda1c67dc69710d0c96b5a8acfdde7c07271962f311f29e52e9dcdee418d8d17e0c84fc08b0ee797690a
- SSDEEP
  
  384:KK+3DTuCjOhx1ULZkKhGSpl+GvR6QhRFO/h:KKYDljU1ULGsGSpPvR6aop
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2