General
- Target CAMSCANNER PAYMENT DETAILS.exe
- Size 320KB
- Sample230522-redlyagh63
- SHA256 688ba75525fea2de02b06a99c4698724cb865d8e0f195d1b7b436aba7d942541
- MD5 df8b6cc1f871db34157a3d23f85450cd
- SHA1 d9c03b376704e43ac5ce983a15b81a5010129aba
- SHA512 ae7ae9af87cc80d68c999e0f71c3a6b1c1ddcb63ccb41e322f5abd0307e39f99c67e0e09b48f68d17abf838a041bc0a7d8d7a78ddea9c3f68ad1ee7a3a165d7a
- SSDEEP 3072:NuuVQvdgLdXX4TZtFxV6qLaKrxV+SjCPGCl4tk3xMIlx29vSRqGPalkzWcB1fqfF:x+m4rFZCSL44tk3Wy2o1ylWhfCOCDJ
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CAMSCANNER PAYMENT DETAILS.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
CAMSCANNER PAYMENT DETAILS.exe
Resource
win10v2004-20230220-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target CAMSCANNER PAYMENT DETAILS.exe
- Size 320KB
- SHA256 688ba75525fea2de02b06a99c4698724cb865d8e0f195d1b7b436aba7d942541
- MD5 df8b6cc1f871db34157a3d23f85450cd
- SHA1 d9c03b376704e43ac5ce983a15b81a5010129aba
- SHA512 ae7ae9af87cc80d68c999e0f71c3a6b1c1ddcb63ccb41e322f5abd0307e39f99c67e0e09b48f68d17abf838a041bc0a7d8d7a78ddea9c3f68ad1ee7a3a165d7a
- SSDEEP 3072:NuuVQvdgLdXX4TZtFxV6qLaKrxV+SjCPGCl4tk3xMIlx29vSRqGPalkzWcB1fqfF:x+m4rFZCSL44tk3Wy2o1ylWhfCOCDJ
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext