Overview

overview

7

Static

static

3

BMTC PO Nu...ed.exe

windows7-x64

7

BMTC PO Nu...ed.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    BMTC PO Number - 11009810 Revised.rar

  • Size

    239KB

  • Sample

    230718-h5h5nsgh39

  • MD5

    84977e8580b21cf959af5155f28414cb

  • SHA1

    5cf271e01a2e7b1a76ce0541952df2b41620596a

  • SHA256

    ed070adab0154f0936cafe969e7717fc63b9160644fa968baa604d00e13109e6

  • SHA512

    bb622c379e9a2b4fba983fed58300209a4a1c055ca0cfb398497ac5c41f2a92e31ff1efbed72926ec1ba5cead5521e60c47526d502077175e1d4645192c846ce

  • SSDEEP

    6144:OuxQDUOxFhNM8bDKo2nDkbUdSkkKovyIX6qLyFNWjW:VxQoOxFhNM8bDKowZ0X6qLyDWjW

Score
7/10

Malware Config

Targets

    • Target

      BMTC PO Number - 11009810 Revised.exe

    • Size

      254KB

    • MD5

      607cca6a1cbfd2f8aa3b69515b706162

    • SHA1

      4a4e5053bed95e0638d21d529a0518270c6d05c6

    • SHA256

      86d4e06d459d993e94c995dc65bf75afbc4f91386ad7b10a1446bbb994c81d64

    • SHA512

      e8f6b92678a9346bc6ce4a120f6b612291305e30de9f2d0c8a9fefc85843a6e3362d7a03ea2e3e23bc9ef4072010cb99e3b7a11fa69d0c29952c374c6aebf09c

    • SSDEEP

      6144:PYa6J8qOUCO4EkeJ1Aa/zEUaaY417XcYYh6+:PYjIUCikAAa/4hUrI

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks