General
- Target New P-Order-19.05.23.exe
- Size 896KB
- Sample230519-kbt17ach22
- SHA256 2d2e43cbbe4c81767774ac3eea5e5f199b1ad6233e4670f3c250ccb6cb7817cd
- MD5 18eaf595b5c647f5676daf3aadbca720
- SHA1 9ac1652a53cbb0966e1e98a7392d312e9025e9a6
- SHA512 01b8de972e46d70eaa930f6e6f5559191a8af32eae03afebbac26d28bb589cdb962c7f50a00d80dacca4b33088e9b0fc079f2d505ae1da3a76ce95af1b78a5aa
- SSDEEP 12288:vRLpNaPn0YPX/N94+OCYMMY9hLV8bTJ2laXGxD8T8b/YvhLxJYzOhHu9mIUm3fmi:cP0tZqhB8bm4+D8Q0NJCO9u9mIUeohW
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
New P-Order-19.05.23.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
New P-Order-19.05.23.exe
Resource
win10v2004-20230221-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target New P-Order-19.05.23.exe
- Size 896KB
- SHA256 2d2e43cbbe4c81767774ac3eea5e5f199b1ad6233e4670f3c250ccb6cb7817cd
- MD5 18eaf595b5c647f5676daf3aadbca720
- SHA1 9ac1652a53cbb0966e1e98a7392d312e9025e9a6
- SHA512 01b8de972e46d70eaa930f6e6f5559191a8af32eae03afebbac26d28bb589cdb962c7f50a00d80dacca4b33088e9b0fc079f2d505ae1da3a76ce95af1b78a5aa
- SSDEEP 12288:vRLpNaPn0YPX/N94+OCYMMY9hLV8bTJ2laXGxD8T8b/YvhLxJYzOhHu9mIUm3fmi:cP0tZqhB8bm4+D8Q0NJCO9u9mIUeohW
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext