General
- Target hesaphareketi-01.pdf.exe
- Size 862KB
- Sample230725-wr28aafd5w
- SHA256 0958d840bb001dab5c73ea644bb8a32a3c28e41f80b93833d54f2ac1e4e11472
- MD5 55f9e129e6c13bcdf5c25f7b37103077
- SHA1 4ad57d1acebacbe0a6827530b32f07625d3aed75
- SHA512 e15bbef9ec9ba47376c6173850cee0c153f28e2a4e35842a7fc0381e0e84302110057c6c6195dd044a1a045679f3687570b68024b5c4107afc7f39ae95ffee13
- SSDEEP 24576:QxUuHIcTrGCSVqfQkdS/tXPj+PgT+mZOj:IfHIkrzSEa1XqIZ
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hesaphareketi-01.pdf.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
hesaphareketi-01.pdf.exe
Resource
win10v2004-20230703-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target hesaphareketi-01.pdf.exe
- Size 862KB
- SHA256 0958d840bb001dab5c73ea644bb8a32a3c28e41f80b93833d54f2ac1e4e11472
- MD5 55f9e129e6c13bcdf5c25f7b37103077
- SHA1 4ad57d1acebacbe0a6827530b32f07625d3aed75
- SHA512 e15bbef9ec9ba47376c6173850cee0c153f28e2a4e35842a7fc0381e0e84302110057c6c6195dd044a1a045679f3687570b68024b5c4107afc7f39ae95ffee13
- SSDEEP 24576:QxUuHIcTrGCSVqfQkdS/tXPj+PgT+mZOj:IfHIkrzSEa1XqIZ
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext