General
- Target 02062026_1800_Customer_Authorization_Form_Shipment.bat.zip
- Size 7.5MB
- Sample260602-wlrvcsds3n
- SHA256 eba4f71f26970d413d36fd058addb78bdbde68b90d0810ea36e8656d315e1e17
Score
8/10
Malware Config
Targets
-
- Target Customer_Authorization_Form_Shipment.bat
- Size 10.6MB
- SHA256 9f2d39b756c97350dcf7dd2db86ac3c7e94d31f1c49190eedf0157ba081b5cdf
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deobfuscate/Decode Files or Information
Payload decoded via CertUtil.