General
- Target Türkiye İş Bankası swift Bildirimi_xls.exe
- Size 548KB
- Sample220422-srbtjsdcg6
- SHA256 88b3d6137dab7366119bd7c0e1939d2b63a5e7eb54f41fc443d6d9ea7e6d2113
- MD5 eff21b954f05c57947ea8b1ff8dd0a97
- SHA1 fd589f4168b444b1024846cdd297ab8b652f36db
- SHA512 fe0487cab6f9f2bee91ec0631ab6b43ae65148e624babf88687bb1fe8a51a2ab6ed1fc58921e07559b3017695b3288ef393299f5718a9829e7b7b445946ce65c
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Türkiye İş Bankası swift Bildirimi_xls.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Türkiye İş Bankası swift Bildirimi_xls.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target Türkiye İş Bankası swift Bildirimi_xls.exe
- Size 548KB
- SHA256 88b3d6137dab7366119bd7c0e1939d2b63a5e7eb54f41fc443d6d9ea7e6d2113
- MD5 eff21b954f05c57947ea8b1ff8dd0a97
- SHA1 fd589f4168b444b1024846cdd297ab8b652f36db
- SHA512 fe0487cab6f9f2bee91ec0631ab6b43ae65148e624babf88687bb1fe8a51a2ab6ed1fc58921e07559b3017695b3288ef393299f5718a9829e7b7b445946ce65c
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.