Overview

overview

7

Static

static

3

SCAN DOCUMENTS.exe

windows7-x64

7

SCAN DOCUMENTS.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SCAN DOCUMENTS.exe

  • Size

    392KB

  • Sample

    231003-hvx6vagh6s

  • MD5

    68fa6c054b7a55d1943b2449ff295dab

  • SHA1

    9e58a4e2c460ad9454a1ab0b5839bbb20dd34fe5

  • SHA256

    53f8211db510203634da93d5f2616ead5784031d1fd9d1ad245e25719fa974a9

  • SHA512

    0983329d8e2e1a4f18659b2d3bb4333fff56e657e91c298a0571963486d92ee9ae88e0aedf297f8f359abd7f1ebdf9e322d1a39c3d0e539970f101f1f3cc9c6f

  • SSDEEP

    12288:BnPdwRimRrvKyHLy+xm3wGRiagRIlbSGx:9PdwRHRjKyrdoDqux

Score
7/10

Malware Config

Targets

    • Target

      SCAN DOCUMENTS.exe

    • Size

      392KB

    • MD5

      68fa6c054b7a55d1943b2449ff295dab

    • SHA1

      9e58a4e2c460ad9454a1ab0b5839bbb20dd34fe5

    • SHA256

      53f8211db510203634da93d5f2616ead5784031d1fd9d1ad245e25719fa974a9

    • SHA512

      0983329d8e2e1a4f18659b2d3bb4333fff56e657e91c298a0571963486d92ee9ae88e0aedf297f8f359abd7f1ebdf9e322d1a39c3d0e539970f101f1f3cc9c6f

    • SSDEEP

      12288:BnPdwRimRrvKyHLy+xm3wGRiagRIlbSGx:9PdwRHRjKyrdoDqux

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks