General
- Target HSBC Payment Advice _pdf.exe
- Size 912KB
- Sample230530-mlkavaha87
- SHA256 697c1f0051fe7230dd1cd8c8a23867cb69912ffe09e0d71950de153b19f41133
- MD5 3ab0d179bd2d29390d6523c9ec6c18a3
- SHA1 7839c3aafeafbcf2913afdfef9971cfa3908bbb8
- SHA512 01ed04ba4a4bd23e392bf5b5f51d331b73d5af317a7296496a565f4fcadf343f9fa7e4a1a705d5742fcb79e5664c7fef2a2421f15ea9df4d5b9c821e5dcf8184
- SSDEEP 12288:bQ2B0xTGlxNqvNu2hZ+nUEsn9KDGCcHRe09SzMwQiHp8KhE+JUK3vZQhr:bQLaVUH999LDRe0EzMHgE2UK/W
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HSBC Payment Advice _pdf.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HSBC Payment Advice _pdf.exe
Resource
win10v2004-20230221-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target HSBC Payment Advice _pdf.exe
- Size 912KB
- SHA256 697c1f0051fe7230dd1cd8c8a23867cb69912ffe09e0d71950de153b19f41133
- MD5 3ab0d179bd2d29390d6523c9ec6c18a3
- SHA1 7839c3aafeafbcf2913afdfef9971cfa3908bbb8
- SHA512 01ed04ba4a4bd23e392bf5b5f51d331b73d5af317a7296496a565f4fcadf343f9fa7e4a1a705d5742fcb79e5664c7fef2a2421f15ea9df4d5b9c821e5dcf8184
- SSDEEP 12288:bQ2B0xTGlxNqvNu2hZ+nUEsn9KDGCcHRe09SzMwQiHp8KhE+JUK3vZQhr:bQLaVUH999LDRe0EzMHgE2UK/W
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext