General
- Target Invoice.exe
- Size 272KB
- Sample230720-l18rbafc65
- SHA256 94509d1a6070cfbaeeee0e3de30bf14dce5f4b28bfeef4ab3cf9bedbd0a07dd1
- MD5 4b13c07a48e57799e54f6e38e34ff6be
- SHA1 6a0290c82cb922e60e949b7f52e9c9fe031433f1
- SHA512 59fa40ea070de7421643c51e5c8a140ef5cd2296568fad594f230940f940a813e368e68fa22bc738fe453afa8d1587c00967c8880ae42cd07ad8fbf3279e2514
- SSDEEP 6144:/Ya6xeXPYBCWD04uosQ3v4nDR/dxo0u4pSDZJhFlrUdGv:/YbefYQ6eBQfMR/no4m/HKd4
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Invoice.exe
Resource
win7-20230712-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoice.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Invoice.exe
- Size 272KB
- SHA256 94509d1a6070cfbaeeee0e3de30bf14dce5f4b28bfeef4ab3cf9bedbd0a07dd1
- MD5 4b13c07a48e57799e54f6e38e34ff6be
- SHA1 6a0290c82cb922e60e949b7f52e9c9fe031433f1
- SHA512 59fa40ea070de7421643c51e5c8a140ef5cd2296568fad594f230940f940a813e368e68fa22bc738fe453afa8d1587c00967c8880ae42cd07ad8fbf3279e2514
- SSDEEP 6144:/Ya6xeXPYBCWD04uosQ3v4nDR/dxo0u4pSDZJhFlrUdGv:/YbefYQ6eBQfMR/no4m/HKd4
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext