General
- Target PURCHASE ORDER 18.08.2022.exe
- Size 795KB
- Sample220819-g3rhlahear
- SHA256 fd6c37d7e88dcea50b3ff64bdc6b0c6bc84ca6a5f1f753587c78f26bd5feff4c
- MD5 672294f62e7c7d40f3f4f3e754bf1778
- SHA1 fb8c0ee3853d00ed42c67f0459986bd304541d19
- SHA512 e8f549b0a72aecab63cd48b13d03bf670c51245873ae7d33fb12be7faa25051eb46321b9f89a6b4c149460d341c59dc618872245cb70498002af0bc0b121714e
- SSDEEP 12288:BEyynzFUD11R/5Pn6nPiI8YOowwmutzD8CGKf/GDcNKNCO4d9:iVoP6MYpwwmA4Kf+QNK54d
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER 18.08.2022.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
PURCHASE ORDER 18.08.2022.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PURCHASE ORDER 18.08.2022.exe
- Size 795KB
- SHA256 fd6c37d7e88dcea50b3ff64bdc6b0c6bc84ca6a5f1f753587c78f26bd5feff4c
- MD5 672294f62e7c7d40f3f4f3e754bf1778
- SHA1 fb8c0ee3853d00ed42c67f0459986bd304541d19
- SHA512 e8f549b0a72aecab63cd48b13d03bf670c51245873ae7d33fb12be7faa25051eb46321b9f89a6b4c149460d341c59dc618872245cb70498002af0bc0b121714e
- SSDEEP 12288:BEyynzFUD11R/5Pn6nPiI8YOowwmutzD8CGKf/GDcNKNCO4d9:iVoP6MYpwwmA4Kf+QNK54d
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext