General
- Target invoice.exe
- Size 1.5MB
- Sample240924-n32f5atepj
- SHA256 4f76e6275e26d69a5b552e8c276478a14968d39ca3234c898db3a4e9b3617327
- MD5 f728ca9075986dc37c3fd0329c48d5ae
- SHA1 adc45cbe4bea7ea4fa9721a22d3e940eff126a24
- SHA512 b22c0c8d72e82677ef2e37644d1e146f5828576737a03bafd48a604de3a214a0596b7e544a62d09c438491be75cb9908a0aa1f001f81ecdaf63b7258bc0c49e0
- SSDEEP 24576:uRmJkcoQricOIQxiZY1iaCEGpht50wXhaWu+sAT4eRnsWdXAyDUn0Z8f+:7JZoQrbTFZY1iaCF4gjjsAkeFXND6OF
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
invoice.exe
Resource
win7-20240708-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
invoice.exe
Resource
win10v2004-20240802-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target invoice.exe
- Size 1.5MB
- SHA256 4f76e6275e26d69a5b552e8c276478a14968d39ca3234c898db3a4e9b3617327
- MD5 f728ca9075986dc37c3fd0329c48d5ae
- SHA1 adc45cbe4bea7ea4fa9721a22d3e940eff126a24
- SHA512 b22c0c8d72e82677ef2e37644d1e146f5828576737a03bafd48a604de3a214a0596b7e544a62d09c438491be75cb9908a0aa1f001f81ecdaf63b7258bc0c49e0
- SSDEEP 24576:uRmJkcoQricOIQxiZY1iaCEGpht50wXhaWu+sAT4eRnsWdXAyDUn0Z8f+:7JZoQrbTFZY1iaCF4gjjsAkeFXND6OF
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext