General
- Target Request for Quotation PR. No.1599-Rev.2.exe
- Size 383KB
- Sample230704-hqcdksch8w
- SHA256 6ad34b096097c2ad7be7db3178407c25b7b6d856dfbc8fe6e76b8e33aeaba80b
- MD5 75d47be9c186bdc46e7d056dfc2010a1
- SHA1 a44b6d8b25805c9d3ba4b048417df28fb68c3fda
- SHA512 fc666ad5a94127139821d81ed841e91aab88d508ecfdf63d6182adb50ac38265fd2ab517b5e35f0017e1d0ea21a671d393c41738e84c0529134ceedd9f595236
- SSDEEP 6144:wYa6HwYZuaivvmkSEykAd8MpRsCihJ8rPCB3fXX3FGVdUISbc+74xyeB7ancugzz:wY9/ivvpS9kAd8Mpu0CBPwVd5SbcI4xP
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Request for Quotation PR. No.1599-Rev.2.exe
Resource
win7-20230703-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Request for Quotation PR. No.1599-Rev.2.exe
Resource
win10v2004-20230621-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Request for Quotation PR. No.1599-Rev.2.exe
- Size 383KB
- SHA256 6ad34b096097c2ad7be7db3178407c25b7b6d856dfbc8fe6e76b8e33aeaba80b
- MD5 75d47be9c186bdc46e7d056dfc2010a1
- SHA1 a44b6d8b25805c9d3ba4b048417df28fb68c3fda
- SHA512 fc666ad5a94127139821d81ed841e91aab88d508ecfdf63d6182adb50ac38265fd2ab517b5e35f0017e1d0ea21a671d393c41738e84c0529134ceedd9f595236
- SSDEEP 6144:wYa6HwYZuaivvmkSEykAd8MpRsCihJ8rPCB3fXX3FGVdUISbc+74xyeB7ancugzz:wY9/ivvpS9kAd8Mpu0CBPwVd5SbcI4xP
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext