General
- Target 24.05.2023_tahsil_senedi_bilgileri.xls.exe
- Size 649KB
- Sample230615-2hnanabe21
- SHA256 70e6864d836f4750789712dcb97587a60c5317e40ec5bccdbebff3c0fbfd7967
- MD5 806043772beadaf01cb4692ea2ecdb53
- SHA1 a54a3c9b92b21d8f1e3e6ba5567fba39fea54247
- SHA512 9db6e33eaa1224b18e897883328d2275733368bec575a69ccc942093d70fc83ceed77675e08d42e0986d6e8531c58ee11e076d69c06e11da68fba0894df43040
- SSDEEP 12288:c8tPplTY6RhKu3nrqF9nnAK7JYppUiocqmdEOwm6hA4SzmjDyVwsm:c8JTDEgunn5dupsc2AT4Szmjjs
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
24.05.2023_tahsil_senedi_bilgileri.xls.exe
Resource
win7-20230220-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
24.05.2023_tahsil_senedi_bilgileri.xls.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 24.05.2023_tahsil_senedi_bilgileri.xls.exe
- Size 649KB
- SHA256 70e6864d836f4750789712dcb97587a60c5317e40ec5bccdbebff3c0fbfd7967
- MD5 806043772beadaf01cb4692ea2ecdb53
- SHA1 a54a3c9b92b21d8f1e3e6ba5567fba39fea54247
- SHA512 9db6e33eaa1224b18e897883328d2275733368bec575a69ccc942093d70fc83ceed77675e08d42e0986d6e8531c58ee11e076d69c06e11da68fba0894df43040
- SSDEEP 12288:c8tPplTY6RhKu3nrqF9nnAK7JYppUiocqmdEOwm6hA4SzmjDyVwsm:c8JTDEgunn5dupsc2AT4Szmjjs
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext