General
- Target New order.rar
- Size 256KB
- Sample230720-ndpq2agf8w
- SHA256 b6a032aafd8e07de9459da5e5f6936791d59434a4e0c8ceb63ddcb2b9d3737b3
- MD5 19d68ca85f31d1924e00a8a750a68cc1
- SHA1 0c7f0245a9c9f39707dd8ec1c17b40c5b34a6c31
- SHA512 73666cd5ebfcac8f50bd5f0f6f4955c7f593a085e6466680802134feb6b58fb37f8cc2a8d33df65f79283a29396bfe73db67762f2e8758dcf34cd70ca3ffd054
- SSDEEP 6144:hZmu0NyqNfV7ypqwem8l4fOYvFhEnSh29YSO4vC48xQO/oCyA:vmtjyw/m8Of7hIAcO4T8x3Px
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
New order.exe
Resource
win7-20230712-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
New order.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target New order.exe
- Size 272KB
- SHA256 94509d1a6070cfbaeeee0e3de30bf14dce5f4b28bfeef4ab3cf9bedbd0a07dd1
- MD5 4b13c07a48e57799e54f6e38e34ff6be
- SHA1 6a0290c82cb922e60e949b7f52e9c9fe031433f1
- SHA512 59fa40ea070de7421643c51e5c8a140ef5cd2296568fad594f230940f940a813e368e68fa22bc738fe453afa8d1587c00967c8880ae42cd07ad8fbf3279e2514
- SSDEEP 6144:/Ya6xeXPYBCWD04uosQ3v4nDR/dxo0u4pSDZJhFlrUdGv:/YbefYQ6eBQfMR/no4m/HKd4
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext