General
- Target RESonak Corporation new Order.exe
- Size 943KB
- Sample230522-mx7khsag2x
- SHA256 bde2918cb64c5e7a60fdd3efb2a0a11bd352210b61c600a19f5b47bc61e5b2de
- MD5 8ab700318069969083a8647e236623e2
- SHA1 b80debfed73f923c6e1f4c0c67a27e3d8dc6035b
- SHA512 93cd485f4c2de1662ae8ece0f101b5d84a71b2179fb134e03800cdf2a096d66c3223bc78c26cb0b6d1012eda3097450a29ff3fe106fd4e37121590bb4eec8636
- SSDEEP 24576:xT8HPsdoX9C4wgYm4edU+qjGxThy8uPeq+8my:6HPsdOC4wg0+qcNq+8my
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RESonak Corporation new Order.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
RESonak Corporation new Order.exe
Resource
win10v2004-20230220-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target RESonak Corporation new Order.exe
- Size 943KB
- SHA256 bde2918cb64c5e7a60fdd3efb2a0a11bd352210b61c600a19f5b47bc61e5b2de
- MD5 8ab700318069969083a8647e236623e2
- SHA1 b80debfed73f923c6e1f4c0c67a27e3d8dc6035b
- SHA512 93cd485f4c2de1662ae8ece0f101b5d84a71b2179fb134e03800cdf2a096d66c3223bc78c26cb0b6d1012eda3097450a29ff3fe106fd4e37121590bb4eec8636
- SSDEEP 24576:xT8HPsdoX9C4wgYm4edU+qjGxThy8uPeq+8my:6HPsdOC4wg0+qcNq+8my
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext