General
-
Target
new order for delivery.exe
-
Size
3.0MB
-
Sample
240624-nfph2syhph
-
MD5
fac7f4daecfe6fef628d2ea6bd2cf96e
-
SHA1
353696bfa1c8e3b59e379d93772fa77fd15a2139
-
SHA256
fcebce72401c21e9f4cc7e337afb73652b8acae3353bf4daaf6715d819dd388c
-
SHA512
6f99d4f4b46047ef89b690de8988e77e9ea574f3a1966580fbe58af0b03539412dddaa0427c15913b36449193e56c32e8e12d3a953a2601492c05a93a144248b
-
SSDEEP
49152:t66KUZJNM5ezOxD3gvMKrAEnP906lqra2/FHyS30Qmti0a6mv/uJ:t6nUvNM5JV3IyEnP9Oa6P307t+Xv/
Static task
static1
Behavioral task
behavioral1
Sample
new order for delivery.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
new order for delivery.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
new order for delivery.exe
-
Size
3.0MB
-
MD5
fac7f4daecfe6fef628d2ea6bd2cf96e
-
SHA1
353696bfa1c8e3b59e379d93772fa77fd15a2139
-
SHA256
fcebce72401c21e9f4cc7e337afb73652b8acae3353bf4daaf6715d819dd388c
-
SHA512
6f99d4f4b46047ef89b690de8988e77e9ea574f3a1966580fbe58af0b03539412dddaa0427c15913b36449193e56c32e8e12d3a953a2601492c05a93a144248b
-
SSDEEP
49152:t66KUZJNM5ezOxD3gvMKrAEnP906lqra2/FHyS30Qmti0a6mv/uJ:t6nUvNM5JV3IyEnP9Oa6P307t+Xv/
-
PureLog Stealer payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-