General
- Target HSBC payment transfer 14-08-202210.50.exe
- Size 705KB
- Sample220814-pt2afaggd2
- SHA256 7abf15d375e9feae83604e3fd3aa96492fa260ae8e45ddecdb0e6658db77278f
- MD5 554176214d8a01bec6232485a93e00bb
- SHA1 71f79b671540e0cb89f6cc4da3a8bba0ae550788
- SHA512 2778134a6ec5f7d2988ac56dc6770a1c7ece5913fdbf7d65f9623698dadd2902c50cb64eb2ac4775025ff9498e2e4277affddcc32651859b3cad27a740f7bc05
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
HSBC payment transfer 14-08-202210.50.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
HSBC payment transfer 14-08-202210.50.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target HSBC payment transfer 14-08-202210.50.exe
- Size 705KB
- SHA256 7abf15d375e9feae83604e3fd3aa96492fa260ae8e45ddecdb0e6658db77278f
- MD5 554176214d8a01bec6232485a93e00bb
- SHA1 71f79b671540e0cb89f6cc4da3a8bba0ae550788
- SHA512 2778134a6ec5f7d2988ac56dc6770a1c7ece5913fdbf7d65f9623698dadd2902c50cb64eb2ac4775025ff9498e2e4277affddcc32651859b3cad27a740f7bc05
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext