General
- Target hesaphareketi-01.pdf.exe
- Size 1016KB
- Sample240201-mmndwsdacn
- SHA256 e47b60a5bfa77215ad9bb87201e28fbbf04a2a20f935491a2ac6fbb60df92180
- MD5 75f06d47d4c8a80688f9d4f33e071318
- SHA1 98eef12a25e4ddf567ecb2426b7d1fd71aa5d773
- SHA512 5d8fe433be3e122ed73a0ad91afe8d3d3aa95129187dbe65fe56b92757f6223003217c30977fd464a0b42d6d3bfa311f22bcf61798e7393acfd74b15d3b7c235
- SSDEEP 24576:HMyUMttrDeuqrT1D9erjQ+DBkm1VoA3kX:dDeuo19IjPBdLoA
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hesaphareketi-01.pdf.exe
Resource
win7-20231215-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
hesaphareketi-01.pdf.exe
Resource
win10v2004-20231222-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target hesaphareketi-01.pdf.exe
- Size 1016KB
- SHA256 e47b60a5bfa77215ad9bb87201e28fbbf04a2a20f935491a2ac6fbb60df92180
- MD5 75f06d47d4c8a80688f9d4f33e071318
- SHA1 98eef12a25e4ddf567ecb2426b7d1fd71aa5d773
- SHA512 5d8fe433be3e122ed73a0ad91afe8d3d3aa95129187dbe65fe56b92757f6223003217c30977fd464a0b42d6d3bfa311f22bcf61798e7393acfd74b15d3b7c235
- SSDEEP 24576:HMyUMttrDeuqrT1D9erjQ+DBkm1VoA3kX:dDeuo19IjPBdLoA
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext