General
- Target SHUYOU 新指令 PO2301010 01072024.exe
- Size 877KB
- Sample240701-l5m1eaydrp
- SHA256 bf8c949142a94cd782ccaa81fdcda4e35b3864a1907c5be0c6665a7eb9b54cd4
- MD5 809255134dc95b9d2f6ab1e7e50d86cc
- SHA1 fa8440c1d13cd4d0a372da8a86f45f6c1359a966
- SHA512 73d353e5e93034133a333a3694099febd35ba8b0dff8eaeb20f412b882abfa266ebb1a6e5620d5813445f027c1d66cd0dd39c444ce9e51242de51a1dce4a535d
- SSDEEP 12288:aRFE8GILjWLWgBaKed6Nzt6imppIDPkzhFFB7W/HV5RHJ8GyTaD9VYLkagpT3pW5:QcBaiNRoISQfNnyTaDrYItt+rUlkzO
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SHUYOU 新指令 PO2301010 01072024.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SHUYOU 新指令 PO2301010 01072024.exe
Resource
win10v2004-20240611-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target SHUYOU 新指令 PO2301010 01072024.exe
- Size 877KB
- SHA256 bf8c949142a94cd782ccaa81fdcda4e35b3864a1907c5be0c6665a7eb9b54cd4
- MD5 809255134dc95b9d2f6ab1e7e50d86cc
- SHA1 fa8440c1d13cd4d0a372da8a86f45f6c1359a966
- SHA512 73d353e5e93034133a333a3694099febd35ba8b0dff8eaeb20f412b882abfa266ebb1a6e5620d5813445f027c1d66cd0dd39c444ce9e51242de51a1dce4a535d
- SSDEEP 12288:aRFE8GILjWLWgBaKed6Nzt6imppIDPkzhFFB7W/HV5RHJ8GyTaD9VYLkagpT3pW5:QcBaiNRoISQfNnyTaDrYItt+rUlkzO
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.