General
- Target Invoice.exe
- Size 280KB
- Sample230717-gnmabsae26
- SHA256 08ac03b06090f79486243eb5b244715ceb3389f52be4eee2b695d2ae80ab20c6
- MD5 f9eb770884f2368ac1b4ea7e796e3932
- SHA1 d24ee670f08f19d11e112cd676d6c734961022a7
- SHA512 8beb74bc9795cd00bd6075ee87b77b3d35e6a741247e8492460c09715ddce73b804469bdd675df5d25cd63fd9b07c7440a6236ad67faa7e041a0640a961725fa
- SSDEEP 6144:/Ya6iAsqSnft5R3KLxJtEHNUrfSBFIzVZMSRoq7aoMxgy:/YsLqSbJmEtv7dS2Xgy
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Invoice.exe
Resource
win7-20230712-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoice.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Invoice.exe
- Size 280KB
- SHA256 08ac03b06090f79486243eb5b244715ceb3389f52be4eee2b695d2ae80ab20c6
- MD5 f9eb770884f2368ac1b4ea7e796e3932
- SHA1 d24ee670f08f19d11e112cd676d6c734961022a7
- SHA512 8beb74bc9795cd00bd6075ee87b77b3d35e6a741247e8492460c09715ddce73b804469bdd675df5d25cd63fd9b07c7440a6236ad67faa7e041a0640a961725fa
- SSDEEP 6144:/Ya6iAsqSnft5R3KLxJtEHNUrfSBFIzVZMSRoq7aoMxgy:/YsLqSbJmEtv7dS2Xgy
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext