General
- Target Pls. Review Attached.exe
- Size 1.2MB
- Sample230530-rlq6lsad2v
- SHA256 283701722fd569d223d0118a3e85b3e63fa97af7a66dd452d9da0346cefd40bf
- MD5 1a5cda84c98bb1cacff0d931ca896a81
- SHA1 a0625fd91fe241eb49b1e25c87edf6f5fa5c793e
- SHA512 35733db9c45f29d3a25ab9a675a5c5c458142d194016c3070a6069871c759597dca787edb1cfbaa377b122babdd316bff70f013bd77a5ad7354af7e8c74cf90c
- SSDEEP 24576:vTbBv5rUPL6byutZfb8Zqlc3fwStW7syeVKN/5ivrWvU:ZBwW1ZIUStWgy0KN/5ivriU
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Pls. Review Attached.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Pls. Review Attached.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Pls. Review Attached.exe
- Size 1.2MB
- SHA256 283701722fd569d223d0118a3e85b3e63fa97af7a66dd452d9da0346cefd40bf
- MD5 1a5cda84c98bb1cacff0d931ca896a81
- SHA1 a0625fd91fe241eb49b1e25c87edf6f5fa5c793e
- SHA512 35733db9c45f29d3a25ab9a675a5c5c458142d194016c3070a6069871c759597dca787edb1cfbaa377b122babdd316bff70f013bd77a5ad7354af7e8c74cf90c
- SSDEEP 24576:vTbBv5rUPL6byutZfb8Zqlc3fwStW7syeVKN/5ivrWvU:ZBwW1ZIUStWgy0KN/5ivriU
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext