General
- Target Purchase Order_231313_20230.exe
- Size 608KB
- Sample230516-sqrhlsad8x
- SHA256 ef201fa6a83547a8b5a1514e948d4208ee20bd4d37c1fe57d81bb1c2dfb1caf5
- MD5 bcc2ef5edecc627633a5c2655b5422dc
- SHA1 6e4d3fc6bc3552d8f1304c60c3b1b9253792a97b
- SHA512 85f271282efc3c271c91ac1ba46c21a401c22c1cce626bd540a2e65ecce5879b075feb5dab64fcb4b1af5f85f45ee0feda13f723c8905f4d951385ad56bd5974
- SSDEEP 12288:zYyv5+7XdJV1D0K6E2RzIDLdeKiLk71tb88:V45J6BcDoLI1t
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Purchase Order_231313_20230.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order_231313_20230.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Purchase Order_231313_20230.exe
- Size 608KB
- SHA256 ef201fa6a83547a8b5a1514e948d4208ee20bd4d37c1fe57d81bb1c2dfb1caf5
- MD5 bcc2ef5edecc627633a5c2655b5422dc
- SHA1 6e4d3fc6bc3552d8f1304c60c3b1b9253792a97b
- SHA512 85f271282efc3c271c91ac1ba46c21a401c22c1cce626bd540a2e65ecce5879b075feb5dab64fcb4b1af5f85f45ee0feda13f723c8905f4d951385ad56bd5974
- SSDEEP 12288:zYyv5+7XdJV1D0K6E2RzIDLdeKiLk71tb88:V45J6BcDoLI1t
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext