149923501e16285e2a6e452849a7cd92531aff50a56a1a703795a59078a35821 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23734193721402430449.bat
Size

11KB
Sample

240723-dtz7lavclf
MD5

4b82bc401595dd846fb1d5da42a7be24
SHA1

2f9827e76f0fd254933294c815afbd283b2fd31d
SHA256

149923501e16285e2a6e452849a7cd92531aff50a56a1a703795a59078a35821
SHA512

342d8a292fc39ddaf118e44afc5d687423b764c57fa3c94c0eb476c49f4bc53a87ca6f71ca7a729681985905bbae79928f2bc36057410cebda34e70ab7199158
SSDEEP

192:f2jwr3SPfHWj233FC32y1ijVMWiccvRDbYzbccvwW/oY0ZHWgjkU0ZuMMVUHXqx+:+jwrCnWj233FC32y1ijVMWiccvRDbebp

Score

8^/10

execution

Malware Config

Targets

- Target
  
  23734193721402430449.bat
- Size
  
  11KB
- MD5
  
  4b82bc401595dd846fb1d5da42a7be24
- SHA1
  
  2f9827e76f0fd254933294c815afbd283b2fd31d
- SHA256
  
  149923501e16285e2a6e452849a7cd92531aff50a56a1a703795a59078a35821
- SHA512
  
  342d8a292fc39ddaf118e44afc5d687423b764c57fa3c94c0eb476c49f4bc53a87ca6f71ca7a729681985905bbae79928f2bc36057410cebda34e70ab7199158
- SSDEEP
  
  192:f2jwr3SPfHWj233FC32y1ijVMWiccvRDbYzbccvwW/oY0ZHWgjkU0ZuMMVUHXqx+:+jwrCnWj233FC32y1ijVMWiccvRDbebp
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2