General
- Target QUOTATION.exe
- Size 650KB
- Sample230503-mss7bsec96
- SHA256 67c1c8e08ebe65a80ae06b9d4011567f4cd8d1e05479b88e061a818dfe467493
- MD5 f6519cf0bbd579233dffa0f20d3cb002
- SHA1 2780109adad9157e5cb4d3ee4f80643969294a34
- SHA512 93414f33e91907429eedfb7d7887ebca9ca5cf5eeed13d11d619f8224fd9fabd346117e823672029d50cb6b0a0ebba39854d0af65ea4ebc366ba1cd93aef00ce
- SSDEEP 12288:+PGp8cXfBm0BRhsLOcGgZr6+gvyGVj84hMEFJvUwCgv3WaJuz1CoOWJ/:+C3ZV7g1tZr9gvvxFhdWwXmaJG1C/q/
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QUOTATION.exe
Resource
win7-20230220-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
QUOTATION.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target QUOTATION.exe
- Size 650KB
- SHA256 67c1c8e08ebe65a80ae06b9d4011567f4cd8d1e05479b88e061a818dfe467493
- MD5 f6519cf0bbd579233dffa0f20d3cb002
- SHA1 2780109adad9157e5cb4d3ee4f80643969294a34
- SHA512 93414f33e91907429eedfb7d7887ebca9ca5cf5eeed13d11d619f8224fd9fabd346117e823672029d50cb6b0a0ebba39854d0af65ea4ebc366ba1cd93aef00ce
- SSDEEP 12288:+PGp8cXfBm0BRhsLOcGgZr6+gvyGVj84hMEFJvUwCgv3WaJuz1CoOWJ/:+C3ZV7g1tZr9gvvxFhdWwXmaJG1C/q/
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext