General
- Target Order specification.exe
- Size 698KB
- Sample220905-nt1s8sgcan
- SHA256 f5e1d6a3d030e6ea4f3393a470ace4e814e972b5bfbdcf7837e356431a51166e
- MD5 4ceeb134e2c08eb28b016c9106a48d70
- SHA1 5a72c6446ce0fff5319f76585e0bcf2d56d2bf62
- SHA512 6eec8bf33ccf92171820f052282cd4064161a21b65790fc9c8ed49beec0243612322ec03d985c1c6b9850e07593725182c3d46dd5d280873b8d613d515add52a
- SSDEEP 12288:WzE+xz2iNEF75euLUk/hPxg1uIuK6mgfYed08wkNi7tF1WrLdkUT:cz16Z5ffPJcu08XNi7rsKQ
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Order specification.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Order specification.exe
Resource
win10v2004-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Order specification.exe
- Size 698KB
- SHA256 f5e1d6a3d030e6ea4f3393a470ace4e814e972b5bfbdcf7837e356431a51166e
- MD5 4ceeb134e2c08eb28b016c9106a48d70
- SHA1 5a72c6446ce0fff5319f76585e0bcf2d56d2bf62
- SHA512 6eec8bf33ccf92171820f052282cd4064161a21b65790fc9c8ed49beec0243612322ec03d985c1c6b9850e07593725182c3d46dd5d280873b8d613d515add52a
- SSDEEP 12288:WzE+xz2iNEF75euLUk/hPxg1uIuK6mgfYed08wkNi7tF1WrLdkUT:cz16Z5ffPJcu08XNi7rsKQ
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext