7b02dcd20292a7d213421e6f0e6c549f57c1c442e93f47255f3385739f07de32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2548429964129941391.bat
Size

11KB
Sample

240723-xrrxzswcqf
MD5

734fe5a8d046ee634a836f020a580867
SHA1

b5730dae8a85c137aa5e2a5601d4290fcaf4123d
SHA256

7b02dcd20292a7d213421e6f0e6c549f57c1c442e93f47255f3385739f07de32
SHA512

4ffa35f75dd870324626356cdb107105861fae25e7ad90ed5d4ddac9f9dea504d4a9ca93abc3d45ae83b4bb3bc63b81e987f945f1be4ff451f87529cb05d39d9
SSDEEP

192:eHwFk2NqwNFR/D93np/ajE5bYhaiIExkX5uqwfEPQUXYAN6uXv96L:eHwmrwNFRbBniExYhnkXkMPQUXh6Mv9S

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2548429964129941391.bat
- Size
  
  11KB
- MD5
  
  734fe5a8d046ee634a836f020a580867
- SHA1
  
  b5730dae8a85c137aa5e2a5601d4290fcaf4123d
- SHA256
  
  7b02dcd20292a7d213421e6f0e6c549f57c1c442e93f47255f3385739f07de32
- SHA512
  
  4ffa35f75dd870324626356cdb107105861fae25e7ad90ed5d4ddac9f9dea504d4a9ca93abc3d45ae83b4bb3bc63b81e987f945f1be4ff451f87529cb05d39d9
- SSDEEP
  
  192:eHwFk2NqwNFR/D93np/ajE5bYhaiIExkX5uqwfEPQUXYAN6uXv96L:eHwmrwNFRbBniExYhnkXkMPQUXh6Mv9S
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2