General
- Target QUOTATION_OCT9FIBA00541·PDF.scr.exe
- Size 1.4MB
- Sample231005-lnrl9sca75
- SHA256 f4ec042b3b9d605d34a32d37c19a100e50f1ab5242f02f826d683ee6f742810a
- MD5 51c98b518c278c54d6b568ed9765fdff
- SHA1 aba7b6fc2706dd780b4b4b2d3e6644157da02850
- SHA512 fc3b1f7e521732fdedc240375643d46f847b91ca6591a730675c59dceab682eea5d5be2d163bb54648379145729596e227bb5ce511c019f4021ebe2e931c36d2
- SSDEEP 24576:W+E2QRJbVG5smA58WMkcqsITrVou74uwsuSQd9FimK:PZicfInVo4wsuxn4r
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_OCT9FIBA00541·PDF.scr.exe
Resource
win7-20230831-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
QUOTATION_OCT9FIBA00541·PDF.scr.exe
Resource
win10v2004-20230915-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target QUOTATION_OCT9FIBA00541·PDF.scr.exe
- Size 1.4MB
- SHA256 f4ec042b3b9d605d34a32d37c19a100e50f1ab5242f02f826d683ee6f742810a
- MD5 51c98b518c278c54d6b568ed9765fdff
- SHA1 aba7b6fc2706dd780b4b4b2d3e6644157da02850
- SHA512 fc3b1f7e521732fdedc240375643d46f847b91ca6591a730675c59dceab682eea5d5be2d163bb54648379145729596e227bb5ce511c019f4021ebe2e931c36d2
- SSDEEP 24576:W+E2QRJbVG5smA58WMkcqsITrVou74uwsuSQd9FimK:PZicfInVo4wsuxn4r
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext