General
- Target dhl.exe
- Size 76KB
- Sample201109-b23yk49gna
- SHA256 93afdcf8446b39767947be48bcf4d111edd581f31eae3797f91fb2c5a7838ecf
- MD5 ca5249221a3f9901af73f0242b92b726
- SHA1 1004830eac43065f7937d596f896f66476e5deba
- SHA512 4e622d254ad91d843af1ec6d8565e31476a1011fd526690ff5143fa327f59d1c55010a991c1a5f1b7931d41a1642a7ef8a1963066ab6ce13eec31358865f4c69
- MD5 SHA1 SHA512
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
dhl.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
dhl.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target dhl.exe
- Size 76KB
- SHA256 93afdcf8446b39767947be48bcf4d111edd581f31eae3797f91fb2c5a7838ecf
- MD5 ca5249221a3f9901af73f0242b92b726
- SHA1 1004830eac43065f7937d596f896f66476e5deba
- SHA512 4e622d254ad91d843af1ec6d8565e31476a1011fd526690ff5143fa327f59d1c55010a991c1a5f1b7931d41a1642a7ef8a1963066ab6ce13eec31358865f4c69
- MD5 SHA1 SHA512
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext