Extracted

Extracted

• • Target

    DHLShippingDocumentsOCT16.bat

  • Size

    548B

  • MD5

    82c15b923af76b0948e0d4ee2bf55643

  • SHA1

    f63f70dcd60bc1caa7dea2b578c8327875a96339

  • SHA256

    7feda153ba607929a53c9daafe358f99079fef0d4c88197a8a7a31239535a208

  • SHA512

    3e1319fc98bb737cccfc1b26cb77b015f1b75b8622f03cdbcfba7629506b3770a335bec82f1844719d23b228464621f09619282a2e2f8cde181208c348578a6d

  Score

  10^/10

  discoveryexecution

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2