General
- Target Hesabınıza para geldi...pdf...exe
- Size 769KB
- Sample220930-mpymmsecan
- SHA256 26f7e04c866b93d54f94ceb8dae437a6a2fa39c271574cfb9c6a2578fa263fa6
- MD5 8fbba42e36615309fc2f61e5b710bc4e
- SHA1 60fa616c1ff8ecbe854e880ee35276b0d16deca5
- SHA512 48bd3b378c0e8a1ad29acd788db82182ed706ba2f12a4548f7152bad1f741f723d333e36680a2ac4c5fffb2fc735b0fd31157af76659e765f0483b46ab22d9b7
- SSDEEP 12288:fToPWBv/cpGrU3yVJW0qGf0SQ/+Fhu9/KR57eRGQOeVo+W1:fTbBv5rUcqGf0x/+QiR4G7b1
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Hesabınıza para geldi...pdf...exe
Resource
win7-20220901-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hesabınıza para geldi...pdf...exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Hesabınıza para geldi...pdf...exe
- Size 769KB
- SHA256 26f7e04c866b93d54f94ceb8dae437a6a2fa39c271574cfb9c6a2578fa263fa6
- MD5 8fbba42e36615309fc2f61e5b710bc4e
- SHA1 60fa616c1ff8ecbe854e880ee35276b0d16deca5
- SHA512 48bd3b378c0e8a1ad29acd788db82182ed706ba2f12a4548f7152bad1f741f723d333e36680a2ac4c5fffb2fc735b0fd31157af76659e765f0483b46ab22d9b7
- SSDEEP 12288:fToPWBv/cpGrU3yVJW0qGf0SQ/+Fhu9/KR57eRGQOeVo+W1:fTbBv5rUcqGf0x/+QiR4G7b1
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext