General
- Target PAYMENT COPY.exe
- Size 775KB
- Sample220818-m2tjfsgec2
- SHA256 b5cc87fd5f7ec59b978d6b6b3f142fe60bd10233c887aceca55954c84ccda9e0
- MD5 495c9ae1c6db6f928d15b52d72fc6820
- SHA1 0b81652f6acd7494fdffddb0309203a23c7e28b5
- SHA512 f285667816c3eb234008f4fa974a7b6ff2378da84899306d378688f248c0954a5790e8defa0222212499c258b07ce7af30828190633010782f47561c70d581df
- SSDEEP 12288:7p1CUjHi11R/5P26n+v+WDP79yoSGKzu7b95B/DQ6yotbTWJi/uoqvcjns6Y1:NcUjqPj+vVTAoFW0+sj2oYqa
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT COPY.exe
Resource
win7-20220812-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
PAYMENT COPY.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PAYMENT COPY.exe
- Size 775KB
- SHA256 b5cc87fd5f7ec59b978d6b6b3f142fe60bd10233c887aceca55954c84ccda9e0
- MD5 495c9ae1c6db6f928d15b52d72fc6820
- SHA1 0b81652f6acd7494fdffddb0309203a23c7e28b5
- SHA512 f285667816c3eb234008f4fa974a7b6ff2378da84899306d378688f248c0954a5790e8defa0222212499c258b07ce7af30828190633010782f47561c70d581df
- SSDEEP 12288:7p1CUjHi11R/5P26n+v+WDP79yoSGKzu7b95B/DQ6yotbTWJi/uoqvcjns6Y1:NcUjqPj+vVTAoFW0+sj2oYqa
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext