General
-
Target
transactions 20220909-308499119-DOC.exe
-
Size
3.1MB
-
Sample
220921-csph2aadcp
-
MD5
928f19dcb0c1902f5b623d3f91648b8b
-
SHA1
959d780ce80ceabc0a5f2a8efbe26fba9011ce19
-
SHA256
af92215f49e265a26b1e64c7681c69ca0e6213d6edf223248091074dcbd0b16c
-
SHA512
52de83710b038b2e944669a1f0e8160d4b8c1eead676aaf967d7f8d1440accc84f8e02a710cfff0486af2e504c4969ccfff4f77bc03ea022cbb9d0929a76a0e0
-
SSDEEP
49152:5BWQGP9D67me3/JutJxc8FTA0LhIiJuEpTp2YTAUA/JGFUuD6yjJGb3LndWDj:Tu9D4xCDc8FTA0OivJGb7C
Static task
static1
Behavioral task
behavioral1
Sample
transactions 20220909-308499119-DOC.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
transactions 20220909-308499119-DOC.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
transactions 20220909-308499119-DOC.exe
-
Size
3.1MB
-
MD5
928f19dcb0c1902f5b623d3f91648b8b
-
SHA1
959d780ce80ceabc0a5f2a8efbe26fba9011ce19
-
SHA256
af92215f49e265a26b1e64c7681c69ca0e6213d6edf223248091074dcbd0b16c
-
SHA512
52de83710b038b2e944669a1f0e8160d4b8c1eead676aaf967d7f8d1440accc84f8e02a710cfff0486af2e504c4969ccfff4f77bc03ea022cbb9d0929a76a0e0
-
SSDEEP
49152:5BWQGP9D67me3/JutJxc8FTA0LhIiJuEpTp2YTAUA/JGFUuD6yjJGb3LndWDj:Tu9D4xCDc8FTA0OivJGb7C
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-