General
- Target DHL_CUSTOMERS_FORM.exe
- Size 1.5MB
- Sample200721-9yfynwhnnx
- SHA256 4cffbdf1d3e2016475da67b15f0ab12a9658e0970f691cebe0bd161e2e1772b2
- MD5 1177bf332db50a89e3bfd846b5c42ea4
- SHA1 c9cfb486662d9c127cb7c5cdc4ec305715677eb4
- SHA512 37dbfdd16eec416538a4fac324662a636ce98246ca70b02baea0894798baf44ce392b01d83ea573993f3ef4bbb5d175749651ac48d7490bdc88810a3b29b2d48
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL_CUSTOMERS_FORM.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DHL_CUSTOMERS_FORM.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target DHL_CUSTOMERS_FORM.exe
- Size 1.5MB
- SHA256 4cffbdf1d3e2016475da67b15f0ab12a9658e0970f691cebe0bd161e2e1772b2
- MD5 1177bf332db50a89e3bfd846b5c42ea4
- SHA1 c9cfb486662d9c127cb7c5cdc4ec305715677eb4
- SHA512 37dbfdd16eec416538a4fac324662a636ce98246ca70b02baea0894798baf44ce392b01d83ea573993f3ef4bbb5d175749651ac48d7490bdc88810a3b29b2d48
- MD5 SHA1 SHA512
Score7/10-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
JavaScript code in executable