ff83e8daabc6d19fa7b967227d331950622d9c9a10334d5bc7030d0d9fd22a08 | Triage

Sharing

General

Target

188801557063505556.bat
Size

23KB
Sample

240723-j9w3rsxcjk
MD5

8e9c8e3250b7a2cbe19b77dbbcdb3420
SHA1

9f7dcfb3b726549c38addb5e397dce1826d40753
SHA256

ff83e8daabc6d19fa7b967227d331950622d9c9a10334d5bc7030d0d9fd22a08
SHA512

c0f5a0640bb42fd34b92998b334aec40ca31509a3b16e93907f22c3dd3d0d27adcc9e58eba685ce3148eebdf1411e6f490e258bec6740fa3598f48abc017f3b8
SSDEEP

384:+tZmEQtnt8TcDAtJ9NPcRdUtOp7etAKqDLHj0sMqFVqkMwlmbzOtRij9O:+tZmEQtn/EPjtOwID0sM8VkWmvOtRi5O

Score

8^/10

execution

Malware Config

Targets

- Target
  
  188801557063505556.bat
- Size
  
  23KB
- MD5
  
  8e9c8e3250b7a2cbe19b77dbbcdb3420
- SHA1
  
  9f7dcfb3b726549c38addb5e397dce1826d40753
- SHA256
  
  ff83e8daabc6d19fa7b967227d331950622d9c9a10334d5bc7030d0d9fd22a08
- SHA512
  
  c0f5a0640bb42fd34b92998b334aec40ca31509a3b16e93907f22c3dd3d0d27adcc9e58eba685ce3148eebdf1411e6f490e258bec6740fa3598f48abc017f3b8
- SSDEEP
  
  384:+tZmEQtnt8TcDAtJ9NPcRdUtOp7etAKqDLHj0sMqFVqkMwlmbzOtRij9O:+tZmEQtn/EPjtOwID0sM8VkWmvOtRi5O
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2