General
- Target Invoice SIL-EDI-0-2022-392.exe
- Size 761KB
- Sample220802-tb7fyshgdp
- SHA256 6a37edabebd44201da96178005629c2e089a88eb4af8fdeef4fe42e1b1242e75
- MD5 dfbd728d2e95bcae886e193a16389fb0
- SHA1 85c4cf5cfa28c5157a47d4f5477641f1db6cbc23
- SHA512 3e7c66643fe3ffb06b666c156e18d3be458854c6980052318dbe1f76cd11d54c7773d95a200ee250e3ea6ac13a2cd054cc47b1e16c8d4226eea53784549512c7
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Invoice SIL-EDI-0-2022-392.exe
Resource
win7-20220718-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoice SIL-EDI-0-2022-392.exe
Resource
win10v2004-20220721-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Invoice SIL-EDI-0-2022-392.exe
- Size 761KB
- SHA256 6a37edabebd44201da96178005629c2e089a88eb4af8fdeef4fe42e1b1242e75
- MD5 dfbd728d2e95bcae886e193a16389fb0
- SHA1 85c4cf5cfa28c5157a47d4f5477641f1db6cbc23
- SHA512 3e7c66643fe3ffb06b666c156e18d3be458854c6980052318dbe1f76cd11d54c7773d95a200ee250e3ea6ac13a2cd054cc47b1e16c8d4226eea53784549512c7
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext