General

  • Target
    New Order-PO # 6330001438 - AL SAHOO.zip
  • Size 609KB
  • Sample230605-tmekbahe55
  • SHA256 ae1a30232dd94e529bb4ee7c5813b855324574374f2d2acabf9cbeb43dd6a734
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      New Order-PO # 6330001438 - AL SAHOO .xlx.exe
    • Size 824KB
    • SHA256 6b5dd535e0c7585720c6710edefc8fc601f56ffa2510994fb4b55a78adb6c145
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks