General
- Target quotation request.exe
- Size 756KB
- Sample230620-g8clmabf2w
- SHA256 6f1acd309fb5ffdbfe2e1ca42dd060ed57e2107767f945f47cbbd71a5a189062
- MD5 8cdaa8773fd3e08dd15b596180872091
- SHA1 de41f2119677b21f5b118515ed32fd4d24c98304
- SHA512 cd9bb046bde914d98fc237baa80a38a73a9573c9bdf855e7fc019ff11547230fd566fd8a4cd54c30551d0f18c91d2fcdf4fa5d3518baf0d74ad73fac6bf76c42
- SSDEEP 12288:Ab903Y6auPM7q6bpw4dcZda/igJ4aaZvZ/xMmAMYm8jgO/x4p+r0t+Qy:Ab903Yrzu4CZdOexD/+mAU8jB/wuA
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
quotation request.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
quotation request.exe
Resource
win10v2004-20230220-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target quotation request.exe
- Size 756KB
- SHA256 6f1acd309fb5ffdbfe2e1ca42dd060ed57e2107767f945f47cbbd71a5a189062
- MD5 8cdaa8773fd3e08dd15b596180872091
- SHA1 de41f2119677b21f5b118515ed32fd4d24c98304
- SHA512 cd9bb046bde914d98fc237baa80a38a73a9573c9bdf855e7fc019ff11547230fd566fd8a4cd54c30551d0f18c91d2fcdf4fa5d3518baf0d74ad73fac6bf76c42
- SSDEEP 12288:Ab903Y6auPM7q6bpw4dcZda/igJ4aaZvZ/xMmAMYm8jgO/x4p+r0t+Qy:Ab903Yrzu4CZdOexD/+mAU8jB/wuA
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext