b1a382506b64fffdad8f072fb85e6530df8ed23d598aa6efed3be74664a603d5 | Triage

Sharing

General

Target

9432255442014331046.bat
Size

11KB
Sample

240723-wsla6asapr
MD5

728abba5b4f37a2493c309cc8afd36a7
SHA1

a30e71dcf552c7121bfdb92e11f52a6c6b9a7d69
SHA256

b1a382506b64fffdad8f072fb85e6530df8ed23d598aa6efed3be74664a603d5
SHA512

ca7bdfbd73e520e840a40301d4fb1ca24ca81c90e26993e2c98b7fe49c44fc98e5571e3ec064ac70151a1225998bf1fcb2236e333a6e5b011b3307a29d62ce31
SSDEEP

192:bIoylQQ8RvwBImeylkjb6CflDp6CfutKcbZob6YWfSlUTkzGs3Dpk1WKfg6E9WPA:bXylQQ8RvwBImeylkjuCflDYCfutKc+5

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9432255442014331046.bat
- Size
  
  11KB
- MD5
  
  728abba5b4f37a2493c309cc8afd36a7
- SHA1
  
  a30e71dcf552c7121bfdb92e11f52a6c6b9a7d69
- SHA256
  
  b1a382506b64fffdad8f072fb85e6530df8ed23d598aa6efed3be74664a603d5
- SHA512
  
  ca7bdfbd73e520e840a40301d4fb1ca24ca81c90e26993e2c98b7fe49c44fc98e5571e3ec064ac70151a1225998bf1fcb2236e333a6e5b011b3307a29d62ce31
- SSDEEP
  
  192:bIoylQQ8RvwBImeylkjb6CflDp6CfutKcbZob6YWfSlUTkzGs3Dpk1WKfg6E9WPA:bXylQQ8RvwBImeylkjuCflDYCfutKc+5
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2