General
- Target Order 32420 03.07.2023.zip
- Size 245KB
- Sample230703-npfbqshe6x
- SHA256 307cea5f6281bf63eed49bd7705b5d672552faa1e4ed819655c9969bf92a356e
- MD5 773e78aee4f366e22c18ebbcd898ebd6
- SHA1 4ab117d8600562b219418723811dfa19db4c3c0d
- SHA512 9cadf6e0a2f0f42ab68cfd1fc7326cbc6a231d0a06abf21b7cf3fc9d54859907b15011767acc2cff7bbfb53d10ace03dda70680464dedf4aa65b5c1337fd4306
- SSDEEP 6144:GQnzNnLM25dCnLuvJqSi4wojivhcNtR+FF15rCCUg4TT:Gl2PMLuvJqn4ZhXR+H1pCfj
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Order 32420 03.07.2023.exe
Resource
win7-20230621-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Order 32420 03.07.2023.exe
Resource
win10v2004-20230621-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Order 32420 03.07.2023.exe
- Size 259KB
- SHA256 1ef60e7809944b7d3e6b66257eb170c8c38eb18ae8936e044609b22f7b6f4622
- MD5 ee548df58c325361eea9bc017a0169ab
- SHA1 0fe0cfad99cac484a3444d768a76384668b88793
- SHA512 7887e9b6b64cc0d0d547ecba0795770f351f2d14ac9205d7ca1623eec5b91d66fb4e40277a49a850ee277412769744583298247531d8ab0e2b3bef3651a5555d
- SSDEEP 6144:/Ya6GNCyenLM25dCdLuvJqai4wojivh6NtR+Fb15ryCUg4aV:/YoN7t2PMLuvJqf4ZFXR+R1pyfK
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext