8f096f75cc4f0653936c65bac748dfcc1bd4c99afb7a932afc81229b3ad24d9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27732262732988519408.bat
Size

8KB
Sample

240724-c6fhaatdqm
MD5

a7babbc4c76d6328da8d54426130469e
SHA1

c94f6067469c5f7f39bb192f307104fe16b3a028
SHA256

8f096f75cc4f0653936c65bac748dfcc1bd4c99afb7a932afc81229b3ad24d9a
SHA512

69e525e3c12c75ac1fed641f4353f18c9936c1ca64ffdc95ac327620a0d99b38cee59d76b059cdc9037c2de4a4187042312345da053321783e7aff616e374158
SSDEEP

192:WqX11ApKAoOAPq3VT5N1pC2bPzbnxq464b9UxKTk:hsA4rc4645UxKo

Score

8^/10

execution

Malware Config

Targets

- Target
  
  27732262732988519408.bat
- Size
  
  8KB
- MD5
  
  a7babbc4c76d6328da8d54426130469e
- SHA1
  
  c94f6067469c5f7f39bb192f307104fe16b3a028
- SHA256
  
  8f096f75cc4f0653936c65bac748dfcc1bd4c99afb7a932afc81229b3ad24d9a
- SHA512
  
  69e525e3c12c75ac1fed641f4353f18c9936c1ca64ffdc95ac327620a0d99b38cee59d76b059cdc9037c2de4a4187042312345da053321783e7aff616e374158
- SSDEEP
  
  192:WqX11ApKAoOAPq3VT5N1pC2bPzbnxq464b9UxKTk:hsA4rc4645UxKo
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2