32acc283188b9c7578a49f288c7adbc7b33a96bb25bcd03057bda02c0f003be8

General

Target
swift_remittance_copy_inv_30_04_2024_0000000000_pdf.exe
Size 246KB
Sample240522-sdaz4afc2t
SHA256 32acc283188b9c7578a49f288c7adbc7b33a96bb25bcd03057bda02c0f003be8
MD5 819efcf6f8669243f3ac2ee6dabc9d8f
SHA1 7c14a7a4701066ec8c7e4cceba089dc0b6f3f8be
SHA512 c3b8832488e7702d917331709766bd544df0e10a7efc6aeff37b8105c092e43f4b890e9ac02449d3651b180bafacfb79f354e1651cd25abd849588577763d198
SSDEEP 3072:liFi6z/VXzAf3ocDmvQEMpvbAGrXX24tfUQsxQlseOcIWNI5FM9eYh3W/SmizUOb:UxFSbDAGrn24tAQPI5FohhISOOb
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

persistence

Malware Config

Targets

- Target
  swift_remittance_copy_inv_30_04_2024_0000000000_pdf.exe
- Size 246KB
- SHA256 32acc283188b9c7578a49f288c7adbc7b33a96bb25bcd03057bda02c0f003be8
- MD5 819efcf6f8669243f3ac2ee6dabc9d8f
- SHA1 7c14a7a4701066ec8c7e4cceba089dc0b6f3f8be
- SHA512 c3b8832488e7702d917331709766bd544df0e10a7efc6aeff37b8105c092e43f4b890e9ac02449d3651b180bafacfb79f354e1651cd25abd849588577763d198
- SSDEEP 3072:liFi6z/VXzAf3ocDmvQEMpvbAGrXX24tfUQsxQlseOcIWNI5FM9eYh3W/SmizUOb:UxFSbDAGrn24tAQPI5FohhISOOb
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917
- MD5 792b6f86e296d3904285b2bf67ccd7e0
- SHA1 966b16f84697552747e0ddd19a4ba8ab5083af31
- SHA512 97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c
- SSDEEP 192:rFiQJ771Jt17C8F1A5xjGNNvgFOiLb7lrT/L93:X71Jt48F2eNvgFF/L
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 10675f13abaee592f14382349aa35d82fb52aab4e27eef61d0c83dec1f6b73da
- MD5 5aa38904acdcc21a2fb8a1d30a72d92f
- SHA1 a9ce7d1456698921791db91347dba0489918d70c
- SHA512 f04740da561d7cd0dea5e839c9e1c339d4a3e63944d3566c94c921a3d170a69918a32dff3f3b43f13d55cc25a2dbb4c21104f062c324308ac5104179766402a3
- SSDEEP 96:AOBtEB2flLkatAthPZJoi9jpfW/er6cBbcB/NFyVOHd0+uHwEX:AhB2flXAVJtjf6cBbcB/N8Ved0PZ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6