General
- Target Purchase Order.exe
- Size 272KB
- Sample230724-tx4besfe22
- SHA256 e325cd7917bb15d2b08a1028083d1bcdbfe46cc42e272f603382cfc30ff2dd10
- MD5 19c737db9110838205dc342887db6fa6
- SHA1 90af87ecd8754f15ffc15375006fff0184a81a62
- SHA512 4386780eeb12f22804ae3eca3cd6ee6efb7f556154f314f881854142535243e44ebff6b03160069ebd303c80bfda4993692c2bc721f2a86de659f45c3ecbc894
- SSDEEP 6144:/Ya69T0ZVHIDo7iG0x+0wUkapBDDE9XyhvU7KI+n8AAzkSqL:/YvfoiG0XwTapBDDuXyq7K9BUkS2
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20230712-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Purchase Order.exe
- Size 272KB
- SHA256 e325cd7917bb15d2b08a1028083d1bcdbfe46cc42e272f603382cfc30ff2dd10
- MD5 19c737db9110838205dc342887db6fa6
- SHA1 90af87ecd8754f15ffc15375006fff0184a81a62
- SHA512 4386780eeb12f22804ae3eca3cd6ee6efb7f556154f314f881854142535243e44ebff6b03160069ebd303c80bfda4993692c2bc721f2a86de659f45c3ecbc894
- SSDEEP 6144:/Ya69T0ZVHIDo7iG0x+0wUkapBDDE9XyhvU7KI+n8AAzkSqL:/YvfoiG0XwTapBDDuXyq7K9BUkS2
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext