General
- Target po.exe
- Size 19KB
- Sample220202-gkrewaggfq
- SHA256 94059fda9456b0e68c641eaec8c244e12dba0d9077b18ee9b879fbb26c8f6dd0
- MD5 7de46a6bffec192dd3f6ff8482173023
- SHA1 39f4c9e5c1ccf3092aa5633953b427db013aee1c
- SHA512 8dfb1aa1eacbe2bdd1600605eee9fb5691cb11bb1c0ba89754343637df8dc58359c7be493e8b16d00ffee1c0d383008ba80c9e0fdb2feb8b8f9f317412642e57
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
po.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
po.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Targets
-
- Target po.exe
- Size 19KB
- SHA256 94059fda9456b0e68c641eaec8c244e12dba0d9077b18ee9b879fbb26c8f6dd0
- MD5 7de46a6bffec192dd3f6ff8482173023
- SHA1 39f4c9e5c1ccf3092aa5633953b427db013aee1c
- SHA512 8dfb1aa1eacbe2bdd1600605eee9fb5691cb11bb1c0ba89754343637df8dc58359c7be493e8b16d00ffee1c0d383008ba80c9e0fdb2feb8b8f9f317412642e57
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.