General
- Target Order NREF S0065930.exe
- Size 829KB
- Sample220811-mteekaged3
- SHA256 17db5b7a915bf4295ef9e087230ee520b643939fa904a8e7ea466bd9807adeae
- MD5 a0df2d8a5cdad93f025abd83a9dc7a3b
- SHA1 ddacdca27f52cddbecfb4536a1e4de6d2829ddc6
- SHA512 8d481f53166746f2942115b735962b922b0cae85694910f3429ce2e8a78e7f85f80f80037443fb47c7b3e06686bbb58c05e53d9d901baae291514089e46a9fd2
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Order NREF S0065930.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Order NREF S0065930.exe
Resource
win10v2004-20220721-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Order NREF S0065930.exe
- Size 829KB
- SHA256 17db5b7a915bf4295ef9e087230ee520b643939fa904a8e7ea466bd9807adeae
- MD5 a0df2d8a5cdad93f025abd83a9dc7a3b
- SHA1 ddacdca27f52cddbecfb4536a1e4de6d2829ddc6
- SHA512 8d481f53166746f2942115b735962b922b0cae85694910f3429ce2e8a78e7f85f80f80037443fb47c7b3e06686bbb58c05e53d9d901baae291514089e46a9fd2
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext