General
- Target RFQ for Req 12465.exe
- Size 292KB
- Sample230601-gr18nach45
- SHA256 bf6837cd64c8a37fc41b2d868fdd148e637f926e6665fe25f40f2b46327cdf31
- MD5 d22375a02236939df6e4f2b423322465
- SHA1 943e28a8cac663dc4beba7b9d298fb7268e1dcfa
- SHA512 c3c5fe2380dbb97a128935c1b607874ba51ee2aa4c5cac076157f84555e4f71e800b349f5149c9f41d06bf3c0b380038838ed43da05ff0805940b13ad6a5f671
- SSDEEP 6144:pYa6myvpo9HV+vftlItkuk66Km4VC7PP3ZovVb0f3FeuZrC3y21:pY4rMbIyLSmb7PPpovVb0fZZN21
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RFQ for Req 12465.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ for Req 12465.exe
Resource
win10v2004-20230221-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target RFQ for Req 12465.exe
- Size 292KB
- SHA256 bf6837cd64c8a37fc41b2d868fdd148e637f926e6665fe25f40f2b46327cdf31
- MD5 d22375a02236939df6e4f2b423322465
- SHA1 943e28a8cac663dc4beba7b9d298fb7268e1dcfa
- SHA512 c3c5fe2380dbb97a128935c1b607874ba51ee2aa4c5cac076157f84555e4f71e800b349f5149c9f41d06bf3c0b380038838ed43da05ff0805940b13ad6a5f671
- SSDEEP 6144:pYa6myvpo9HV+vftlItkuk66Km4VC7PP3ZovVb0f3FeuZrC3y21:pY4rMbIyLSmb7PPpovVb0fZZN21
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext