General
- Target Purchase Order_ ENQ REF_PDF____________________________..exe
- Size 692KB
- Sample230526-sblc2sga47
- SHA256 032454dace97a2e1d466b0a2749f8a3fbaac125c110a89f43a1ecac98aa05b49
- MD5 83266c7c6cdde4dda499c3b866762aa6
- SHA1 77dd4f84291f19dd868f43d397bc9a420e584520
- SHA512 e1139db61e55307c926c545df8fae27b7327f5c419b40df1934500f69e17747ca403ad92e4386491c66962bf80a2c3f136570e531d818eac551c33f72da3d94b
- SSDEEP 12288:vKd7z5GoJiGaq5auljBSN3sVS5TazUl4Lv/xXoVK8Dis77EfGF+VCp:c5GoR5a+VV1ol4jiV5DLP3F+V6
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Purchase Order_ ENQ REF_PDF____________________________..exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order_ ENQ REF_PDF____________________________..exe
Resource
win10v2004-20230220-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Purchase Order_ ENQ REF_PDF____________________________..exe
- Size 692KB
- SHA256 032454dace97a2e1d466b0a2749f8a3fbaac125c110a89f43a1ecac98aa05b49
- MD5 83266c7c6cdde4dda499c3b866762aa6
- SHA1 77dd4f84291f19dd868f43d397bc9a420e584520
- SHA512 e1139db61e55307c926c545df8fae27b7327f5c419b40df1934500f69e17747ca403ad92e4386491c66962bf80a2c3f136570e531d818eac551c33f72da3d94b
- SSDEEP 12288:vKd7z5GoJiGaq5auljBSN3sVS5TazUl4Lv/xXoVK8Dis77EfGF+VCp:c5GoR5a+VV1ol4jiV5DLP3F+V6
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext