General
- Target Invoices & Supporting documents.exe
- Size 778KB
- Sample221013-p9sm8sehc2
- SHA256 9c3482d4497d3da7397fb8b6bdc6f7ad8a0d143f352f4cf726df151f44b596f3
- MD5 58b8754fcf31414e55d22f7d87494f93
- SHA1 0b51c237961ae6f75736a83d7cb60803a114ba57
- SHA512 995fc690e5045dbb1cf2b41f570e70ea7d7a9f1669944bfe49721046bb8d16039a9b61d5f976acfa966f39b241cd71aafa9aca7cae74c90d1b30e56aa1b93c26
- SSDEEP 12288:Y0qf76iyiQMJ8wojLTwf9CWsJUHIJBYNXQB7t5h:Y0qmiE9jA0WsJNU
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Invoices & Supporting documents.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoices & Supporting documents.exe
Resource
win10v2004-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Invoices & Supporting documents.exe
- Size 778KB
- SHA256 9c3482d4497d3da7397fb8b6bdc6f7ad8a0d143f352f4cf726df151f44b596f3
- MD5 58b8754fcf31414e55d22f7d87494f93
- SHA1 0b51c237961ae6f75736a83d7cb60803a114ba57
- SHA512 995fc690e5045dbb1cf2b41f570e70ea7d7a9f1669944bfe49721046bb8d16039a9b61d5f976acfa966f39b241cd71aafa9aca7cae74c90d1b30e56aa1b93c26
- SSDEEP 12288:Y0qf76iyiQMJ8wojLTwf9CWsJUHIJBYNXQB7t5h:Y0qmiE9jA0WsJNU
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext