General
- Target Halkbank_Ekstre_20221009_080900_117636.pdf.exe
- Size 1.2MB
- Sample221010-h948psbab9
- SHA256 8f08318090a1dd5d08d0ebe5b2ef3d2a9aa2f54cb5b30db64773756b50bd21e9
- MD5 cba31acc00740bbb9ecb71c3b367b8ec
- SHA1 98b111f3f779b0c25eabdeeb0d5b9c2db8e6f46e
- SHA512 6208c87f934149e8efa47c951dcaa3caa9eb5d42e37d9bb7c66b24b25e29813a456c2b5b3c3df05bc229229602dfff943bd93c1ae7cdf434a64a5ba4aa8d1d06
- SSDEEP 24576:AjA21whiCDbsRqHIEPdplOFdb5P6b769gg2IGtL82RdHCk:AE2ChFYRspItP6b1g2Dtt
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20221009_080900_117636.pdf.exe
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20221009_080900_117636.pdf.exe
Resource
win10v2004-20220901-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Halkbank_Ekstre_20221009_080900_117636.pdf.exe
- Size 1.2MB
- SHA256 8f08318090a1dd5d08d0ebe5b2ef3d2a9aa2f54cb5b30db64773756b50bd21e9
- MD5 cba31acc00740bbb9ecb71c3b367b8ec
- SHA1 98b111f3f779b0c25eabdeeb0d5b9c2db8e6f46e
- SHA512 6208c87f934149e8efa47c951dcaa3caa9eb5d42e37d9bb7c66b24b25e29813a456c2b5b3c3df05bc229229602dfff943bd93c1ae7cdf434a64a5ba4aa8d1d06
- SSDEEP 24576:AjA21whiCDbsRqHIEPdplOFdb5P6b769gg2IGtL82RdHCk:AE2ChFYRspItP6b1g2Dtt
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext