General
- Target HesaphareketI-01.exe
- Size 372KB
- Sample230106-lvgqmsff34
- SHA256 e4851305e4e93808dd9a6d3cb24f9799327ce44245cd56ed415f9efde2efe239
- MD5 b0249cbd8dbcd0f05d7f851bd210d3a2
- SHA1 9cc933c3dc909a4980f04aeb4ad4d8c804e8b734
- SHA512 bd11af5fb24525ed94434268ff7d74c6079355e81fa864598dd223967ca1c9e05fd1aab5aca20d31a000e117d012d1fa9017d366e714bff21ae9b282522e9f15
- SSDEEP 6144:2Ya6BgSECqpOY0b3tHDU4DdBDMIo3vo+RJOGkTYurr4OrY6Kpl6y:2Y3gQqpOY0b3tDl7ofhJODTFrr48KP6y
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
HesaphareketI-01.exe
Resource
win7-20220812-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
HesaphareketI-01.exe
Resource
win10v2004-20220812-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target HesaphareketI-01.exe
- Size 372KB
- SHA256 e4851305e4e93808dd9a6d3cb24f9799327ce44245cd56ed415f9efde2efe239
- MD5 b0249cbd8dbcd0f05d7f851bd210d3a2
- SHA1 9cc933c3dc909a4980f04aeb4ad4d8c804e8b734
- SHA512 bd11af5fb24525ed94434268ff7d74c6079355e81fa864598dd223967ca1c9e05fd1aab5aca20d31a000e117d012d1fa9017d366e714bff21ae9b282522e9f15
- SSDEEP 6144:2Ya6BgSECqpOY0b3tHDU4DdBDMIo3vo+RJOGkTYurr4OrY6Kpl6y:2Y3gQqpOY0b3tDl7ofhJODTFrr48KP6y
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext