General
- Target Proforma Invoice-309-Ref-284.pdf.7z
- Size 885KB
- Sample220816-m7ebqagbdp
- SHA256 c98ce1b1631ff09c94f09aac3bb518e225dbc50d3a10d79d8f891e3a29ec86cb
- MD5 1d8ffafe879d55669b84523339162992
- SHA1 3648072be28e57c53b49fbae568ce47884bffddb
- SHA512 567b766f96c316834028c817db74a3fe67fbf44ec4fec6f7c4113a590c7a1f4479e42b6843cdbcde99a1ac4240e2e7eee507599807f46d52092c9c04a6f8a895
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
Proforma Invoice-309-Ref-284.pdf.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Proforma Invoice-309-Ref-284.pdf.exe
- Size 1.1MB
- SHA256 db70ee07544744857112a453ccafc8b82745fa014116c72e14103a0f03289cfc
- MD5 fd940584a0704b0c32130bbcd48e2a62
- SHA1 5928414adc0160c7cff0984613ca2c3f8829bde1
- SHA512 51599f65fa3097871314d877e2fd2c00dfb1772ed23716eaef2ca9d64ef96532b10da6a19af23b4384a9dc0647e845f461d07d71c00d2bf007ab5beb49625c00
- MD5 SHA1 SHA512
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext