General
- Target DHL_Nov 2020 at 1.22_8BZ290_PDF.exe
- Size 497KB
- Sample201217-64rm489x3n
- SHA256 9634cf79c1254f6eb68967cc89267c50513f9df930c15bdcc77bbd1fa1b5add6
- MD5 702c2b5a8a797409644b98df16dd5f74
- SHA1 bc4fd2aa988431c99a5dcb6ab10b41ff75324b67
- SHA512 f519a8594b30079e928c6161430a49b62874e9d52bdb3451a5382026fbc3bd99ca6d3cfebb980ca319d3290a2b9f2974b198523acacf10facb2d618dac4c5a12
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL_Nov 2020 at 1.22_8BZ290_PDF.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DHL_Nov 2020 at 1.22_8BZ290_PDF.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target DHL_Nov 2020 at 1.22_8BZ290_PDF.exe
- Size 497KB
- SHA256 9634cf79c1254f6eb68967cc89267c50513f9df930c15bdcc77bbd1fa1b5add6
- MD5 702c2b5a8a797409644b98df16dd5f74
- SHA1 bc4fd2aa988431c99a5dcb6ab10b41ff75324b67
- SHA512 f519a8594b30079e928c6161430a49b62874e9d52bdb3451a5382026fbc3bd99ca6d3cfebb980ca319d3290a2b9f2974b198523acacf10facb2d618dac4c5a12
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext