General
- Target SecuriteInfo.com.Win32.PWSX-gen.13961.20450.exe
- Size 718KB
- Sample240320-kczytscf76
- SHA256 5f8a2e11f5a15dbb011d8517c65cf242e67c06ded9b3bdb093678bbd0a5ad797
- MD5 87f68d712e202e6330956e72fd1f0aa4
- SHA1 020297e6d88e7c0009b5257693922c74cf363f49
- SHA512 5475dba95fc20daada5b028a53157347975d27db54a8a7860e3cfbeafd94f84f4be5a0474b71d6a20907f190aa279f312ef4cb571fc9bcd44e385695867e9fc3
- SSDEEP 12288:NifUqPAxN1kz0MbNeREzpVbvZYcprCBxOJ1ST6a194nMpRKxbRsrB0nLCqFI0:gfUqPAxN1ZIoajbZwBxCEx1yxbRCB0mE
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.13961.20450.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.13961.20450.exe
Resource
win10v2004-20240226-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.PWSX-gen.13961.20450.exe
- Size 718KB
- SHA256 5f8a2e11f5a15dbb011d8517c65cf242e67c06ded9b3bdb093678bbd0a5ad797
- MD5 87f68d712e202e6330956e72fd1f0aa4
- SHA1 020297e6d88e7c0009b5257693922c74cf363f49
- SHA512 5475dba95fc20daada5b028a53157347975d27db54a8a7860e3cfbeafd94f84f4be5a0474b71d6a20907f190aa279f312ef4cb571fc9bcd44e385695867e9fc3
- SSDEEP 12288:NifUqPAxN1kz0MbNeREzpVbvZYcprCBxOJ1ST6a194nMpRKxbRsrB0nLCqFI0:gfUqPAxN1ZIoajbZwBxCEx1yxbRCB0mE
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext