Overview

overview

7

Static

static

3

New P-Orde...23.exe

windows7-x64

5

New P-Orde...23.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New P-Order-19.05.23.exe

  • Size

    896KB

  • Sample

    230519-kbt17ach22

  • MD5

    18eaf595b5c647f5676daf3aadbca720

  • SHA1

    9ac1652a53cbb0966e1e98a7392d312e9025e9a6

  • SHA256

    2d2e43cbbe4c81767774ac3eea5e5f199b1ad6233e4670f3c250ccb6cb7817cd

  • SHA512

    01b8de972e46d70eaa930f6e6f5559191a8af32eae03afebbac26d28bb589cdb962c7f50a00d80dacca4b33088e9b0fc079f2d505ae1da3a76ce95af1b78a5aa

  • SSDEEP

    12288:vRLpNaPn0YPX/N94+OCYMMY9hLV8bTJ2laXGxD8T8b/YvhLxJYzOhHu9mIUm3fmi:cP0tZqhB8bm4+D8Q0NJCO9u9mIUeohW

Score
7/10

Malware Config

Targets

    • Target

      New P-Order-19.05.23.exe

    • Size

      896KB

    • MD5

      18eaf595b5c647f5676daf3aadbca720

    • SHA1

      9ac1652a53cbb0966e1e98a7392d312e9025e9a6

    • SHA256

      2d2e43cbbe4c81767774ac3eea5e5f199b1ad6233e4670f3c250ccb6cb7817cd

    • SHA512

      01b8de972e46d70eaa930f6e6f5559191a8af32eae03afebbac26d28bb589cdb962c7f50a00d80dacca4b33088e9b0fc079f2d505ae1da3a76ce95af1b78a5aa

    • SSDEEP

      12288:vRLpNaPn0YPX/N94+OCYMMY9hLV8bTJ2laXGxD8T8b/YvhLxJYzOhHu9mIUm3fmi:cP0tZqhB8bm4+D8Q0NJCO9u9mIUeohW

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks