General
- Target Payment advice.exe
- Size 603KB
- Sample220727-gn6c7sedb5
- SHA256 8ea73a98123f8923548e6e339e3f2ed5b7c231948b8d3a7faf0c7f6edefe1d12
- MD5 055376b62b9e6a85f50024b52d578cd7
- SHA1 0c6a4e4d517e47c810d4c8e5685caaca18c559cf
- SHA512 a40e90b773ff3aae0539ca0a539e6a0cb84609f743c8b35dd4a99de92d9846e46e9b3006edaf45cd6753549a8840dadd04f7f687c9480be1dc24927210d72cf7
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Payment advice.exe
Resource
win7-20220718-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payment advice.exe
Resource
win10v2004-20220722-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Payment advice.exe
- Size 603KB
- SHA256 8ea73a98123f8923548e6e339e3f2ed5b7c231948b8d3a7faf0c7f6edefe1d12
- MD5 055376b62b9e6a85f50024b52d578cd7
- SHA1 0c6a4e4d517e47c810d4c8e5685caaca18c559cf
- SHA512 a40e90b773ff3aae0539ca0a539e6a0cb84609f743c8b35dd4a99de92d9846e46e9b3006edaf45cd6753549a8840dadd04f7f687c9480be1dc24927210d72cf7
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext