General
- Target Odeme Kopyası_Ziraat Bankasi_730000676554512.exe
- Size 276KB
- Sample230412-p47j7scd54
- SHA256 cadf95355bd6ea18fdd3555ea3f85d102f40b3df0dc36b332f9ad8b505105f6e
- MD5 9ed4ce6b5721860f98c4d05940dab25d
- SHA1 56cfb572d4b5bf0e5bfa4dacb7b540327680b8ad
- SHA512 7d57c35069792df4d74fa36ad04e8b990f6f4c6490dfdacb3fb0c15251d319d9ee260996c3c9317c39c02d9a84076c661b7761d45fa015787d3342cc7e8e1db7
- SSDEEP 3072:PcPh8JQ8SpVgGGGMVQL8eHj8rnB+7aPSIUaRShYDzJebzY7mz/Kj/VMqFUcFdyYu:6p8S7nAQLjkBfU5YMbCgOhY
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Odeme Kopyası_Ziraat Bankasi_730000676554512.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Odeme Kopyası_Ziraat Bankasi_730000676554512.exe
Resource
win10v2004-20230221-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Odeme Kopyası_Ziraat Bankasi_730000676554512.exe
- Size 276KB
- SHA256 cadf95355bd6ea18fdd3555ea3f85d102f40b3df0dc36b332f9ad8b505105f6e
- MD5 9ed4ce6b5721860f98c4d05940dab25d
- SHA1 56cfb572d4b5bf0e5bfa4dacb7b540327680b8ad
- SHA512 7d57c35069792df4d74fa36ad04e8b990f6f4c6490dfdacb3fb0c15251d319d9ee260996c3c9317c39c02d9a84076c661b7761d45fa015787d3342cc7e8e1db7
- SSDEEP 3072:PcPh8JQ8SpVgGGGMVQL8eHj8rnB+7aPSIUaRShYDzJebzY7mz/Kj/VMqFUcFdyYu:6p8S7nAQLjkBfU5YMbCgOhY
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application