General
- Target SecuriteInfo.com.Win32.PWSX-gen.12092.5437.exe
- Size 778KB
- Sample240402-jcc9dsbe52
- SHA256 201659dbdfcf74863cd21befac24ee34f3a1fd86985a2a5b4077810f7156e993
- MD5 eebd4ce7d4ae2ccf575a02578f5408b5
- SHA1 bec0d8d1471487090a3698865053d1e63cbdd67f
- SHA512 8da405d172a0e62435f9d8d32066acaecc8e16f73832ec5f93bb2acbecc71d18c4b7e2e358c588caaa9bcdbbb719f2f598e797ca1440beb5f53e4bcb91cf006a
- SSDEEP 12288:uPGmMZcdFaRNj61FQ2azZ1G1BLR3RE5grPtG44n/TAU5iu8QjxefnuYQgbI5m:uMEyoo2p7HE5QtwUeiAN/Y
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.12092.5437.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.12092.5437.exe
Resource
win10v2004-20231215-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.PWSX-gen.12092.5437.exe
- Size 778KB
- SHA256 201659dbdfcf74863cd21befac24ee34f3a1fd86985a2a5b4077810f7156e993
- MD5 eebd4ce7d4ae2ccf575a02578f5408b5
- SHA1 bec0d8d1471487090a3698865053d1e63cbdd67f
- SHA512 8da405d172a0e62435f9d8d32066acaecc8e16f73832ec5f93bb2acbecc71d18c4b7e2e358c588caaa9bcdbbb719f2f598e797ca1440beb5f53e4bcb91cf006a
- SSDEEP 12288:uPGmMZcdFaRNj61FQ2azZ1G1BLR3RE5grPtG44n/TAU5iu8QjxefnuYQgbI5m:uMEyoo2p7HE5QtwUeiAN/Y
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext