Overview

overview

7

Static

static

3

Purchase O..._..exe

windows7-x64

7

Purchase O..._..exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Purchase Order_ ENQ REF_PDF____________________________..exe

  • Size

    692KB

  • Sample

    230526-sbs3wsge3y

  • MD5

    83266c7c6cdde4dda499c3b866762aa6

  • SHA1

    77dd4f84291f19dd868f43d397bc9a420e584520

  • SHA256

    032454dace97a2e1d466b0a2749f8a3fbaac125c110a89f43a1ecac98aa05b49

  • SHA512

    e1139db61e55307c926c545df8fae27b7327f5c419b40df1934500f69e17747ca403ad92e4386491c66962bf80a2c3f136570e531d818eac551c33f72da3d94b

  • SSDEEP

    12288:vKd7z5GoJiGaq5auljBSN3sVS5TazUl4Lv/xXoVK8Dis77EfGF+VCp:c5GoR5a+VV1ol4jiV5DLP3F+V6

Score
7/10

Malware Config

Targets

    • Target

      Purchase Order_ ENQ REF_PDF____________________________..exe

    • Size

      692KB

    • MD5

      83266c7c6cdde4dda499c3b866762aa6

    • SHA1

      77dd4f84291f19dd868f43d397bc9a420e584520

    • SHA256

      032454dace97a2e1d466b0a2749f8a3fbaac125c110a89f43a1ecac98aa05b49

    • SHA512

      e1139db61e55307c926c545df8fae27b7327f5c419b40df1934500f69e17747ca403ad92e4386491c66962bf80a2c3f136570e531d818eac551c33f72da3d94b

    • SSDEEP

      12288:vKd7z5GoJiGaq5auljBSN3sVS5TazUl4Lv/xXoVK8Dis77EfGF+VCp:c5GoR5a+VV1ol4jiV5DLP3F+V6

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks