General

  • Target

    PO No- 24410083.exe

  • Size

    680KB

  • Sample

    240311-v4a4wsbe58

  • MD5

    348720673a77fff3fc9e8113c62be09d

  • SHA1

    f4780bc9d9c732c3adbbf323e7b33f90f9a88dc6

  • SHA256

    cd95256b6d16fc3d0715d2f3bba62ebd354301318b961b26f4788f899e59f6cc

  • SHA512

    9b7d606ed3a50905cec6b9725372036853b22df675e298ad3952346768fab8376506bfc69f09767defd9f1d94dbd2c9318b3a44b6bfbe38dd1033b80f47adf28

  • SSDEEP

    12288:NPzipDeTjY0GRsVuRrUeYVdtcYcXX+SleFodYpOKjJ944cWc3/S4aM6:x3nY070wP3SsodYpPH446/S4a

Score
7/10

Malware Config

Targets

    • Target

      PO No- 24410083.exe

    • Size

      680KB

    • MD5

      348720673a77fff3fc9e8113c62be09d

    • SHA1

      f4780bc9d9c732c3adbbf323e7b33f90f9a88dc6

    • SHA256

      cd95256b6d16fc3d0715d2f3bba62ebd354301318b961b26f4788f899e59f6cc

    • SHA512

      9b7d606ed3a50905cec6b9725372036853b22df675e298ad3952346768fab8376506bfc69f09767defd9f1d94dbd2c9318b3a44b6bfbe38dd1033b80f47adf28

    • SSDEEP

      12288:NPzipDeTjY0GRsVuRrUeYVdtcYcXX+SleFodYpOKjJ944cWc3/S4aM6:x3nY070wP3SsodYpPH446/S4a

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks