General
- Target SecuriteInfo.com.Win32.PWSX-gen.29797.5874.exe
- Size 1008KB
- Sample221214-qrtcgsch3x
- SHA256 64e04b8bc093e2dbc49cd2ed382369a4ec0c78de9054cb8f747137c578a941e3
- MD5 5adb74577201e0ea112f4195c9e6e7f6
- SHA1 4051bab7c226932c2d48b5bdc94fab29a481588d
- SHA512 c2f9b5cc3cc5bf46ef30ea1e4803e279b3506968c0d8e681a1eca8ed559224df36719fd19c1f471be7fc07027c3d10558d1ef3c3c74f31b08980ea9d31220020
- SSDEEP 24576:FGTgVIYba1Yp8XR9PZD6XQAj1PiS4G3r5/oOi3bJhxVsWy:FGT6Iz1Y+h9xD6X
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.29797.5874.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.29797.5874.exe
Resource
win10v2004-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.PWSX-gen.29797.5874.exe
- Size 1008KB
- SHA256 64e04b8bc093e2dbc49cd2ed382369a4ec0c78de9054cb8f747137c578a941e3
- MD5 5adb74577201e0ea112f4195c9e6e7f6
- SHA1 4051bab7c226932c2d48b5bdc94fab29a481588d
- SHA512 c2f9b5cc3cc5bf46ef30ea1e4803e279b3506968c0d8e681a1eca8ed559224df36719fd19c1f471be7fc07027c3d10558d1ef3c3c74f31b08980ea9d31220020
- SSDEEP 24576:FGTgVIYba1Yp8XR9PZD6XQAj1PiS4G3r5/oOi3bJhxVsWy:FGT6Iz1Y+h9xD6X
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext