General
- Target MT10320221808-004. pdf.exe
- Size 697KB
- Sample220818-vpp99shdaq
- SHA256 726fd095c55cdab5860f8252050ebd2f3c3d8eace480f8422e52b3d4773b0d1c
- MD5 b7127b3281dbd5f1ae76ea500db1ce6a
- SHA1 6e7b8bdc554fe91eac7eef5b299158e6b2287c40
- SHA512 4cceb7a62dda794afcdf291ef5b9baa71e0ddbbb6638b8535aafb31b394f4f74a649f0f0c5d2666809a7012a6aa9820ce636866a39b0d2e9d8588c1d8fa23a8c
- SSDEEP 12288:r7Y911R/5P96nhHwJ49Oy6P31BVdtXyytO/ELf:r8PwhYX/VdtXjtoEz
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
MT10320221808-004. pdf.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
MT10320221808-004. pdf.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target MT10320221808-004. pdf.exe
- Size 697KB
- SHA256 726fd095c55cdab5860f8252050ebd2f3c3d8eace480f8422e52b3d4773b0d1c
- MD5 b7127b3281dbd5f1ae76ea500db1ce6a
- SHA1 6e7b8bdc554fe91eac7eef5b299158e6b2287c40
- SHA512 4cceb7a62dda794afcdf291ef5b9baa71e0ddbbb6638b8535aafb31b394f4f74a649f0f0c5d2666809a7012a6aa9820ce636866a39b0d2e9d8588c1d8fa23a8c
- SSDEEP 12288:r7Y911R/5P96nhHwJ49Oy6P31BVdtXyytO/ELf:r8PwhYX/VdtXjtoEz
- MD5 SHA1 SHA512 SSDEEP
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext