Overview

overview

8

Static

static

1

1406136330...95.bat

windows7-x64

8

1406136330...95.bat

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    140613633074418795.bat

  • Size

    6KB

  • Sample

    240723-zdpxkszgmd

  • MD5

    8d380b6450331e3764d24d67e47bd7c3

  • SHA1

    a36c714d2eb776e69907b9ce16abddffb48f7e29

  • SHA256

    6dcbf5f9734faf22fdabd53e8346c7bd16c688ff1193c16c6de353a8bea56f4a

  • SHA512

    a031df9f79bb652ea6e5be1eed6e9e56a8ba149194d86d04d784f4abe1d4693f42609fa3a0fa2f0113c50fb4ac48302f1e9887ba218f655949eac49b427ec4f3

  • SSDEEP

    192:yxn8/hAkLNpmbfdyR+++JR+++R+uVF/2wf:yxnRkhpmDdyR+++JR+++R+uVh2wf

Score
8/10
execution

Malware Config

Targets

    • Target

      140613633074418795.bat

    • Size

      6KB

    • MD5

      8d380b6450331e3764d24d67e47bd7c3

    • SHA1

      a36c714d2eb776e69907b9ce16abddffb48f7e29

    • SHA256

      6dcbf5f9734faf22fdabd53e8346c7bd16c688ff1193c16c6de353a8bea56f4a

    • SHA512

      a031df9f79bb652ea6e5be1eed6e9e56a8ba149194d86d04d784f4abe1d4693f42609fa3a0fa2f0113c50fb4ac48302f1e9887ba218f655949eac49b427ec4f3

    • SSDEEP

      192:yxn8/hAkLNpmbfdyR+++JR+++R+uVF/2wf:yxnRkhpmDdyR+++JR+++R+uVh2wf

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks