General
- Target RECEIPT DHL.exe
- Size 1.4MB
- Sample210118-amd8xflqzn
- SHA256 c5e8a6ea759d6b8b95422435a60af0f787f598c0825847734778e9fa6259ad96
- MD5 8efec6094a33866da08ecb755427b526
- SHA1 7119e35405b4084e8c4926718bca65ad81cc399b
- SHA512 85b8bc4e6a472ff24bb4c002a97bf2b5f4ff75ce0cb910e1f80dc7e055289953acdbd3741bfaa730a48ac86789a34d8d01df5ef9f2105b983d0cf8ac4a2f1b73
- MD5 SHA1 SHA512
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
RECEIPT DHL.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
RECEIPT DHL.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target RECEIPT DHL.exe
- Size 1.4MB
- SHA256 c5e8a6ea759d6b8b95422435a60af0f787f598c0825847734778e9fa6259ad96
- MD5 8efec6094a33866da08ecb755427b526
- SHA1 7119e35405b4084e8c4926718bca65ad81cc399b
- SHA512 85b8bc4e6a472ff24bb4c002a97bf2b5f4ff75ce0cb910e1f80dc7e055289953acdbd3741bfaa730a48ac86789a34d8d01df5ef9f2105b983d0cf8ac4a2f1b73
- MD5 SHA1 SHA512
Score6/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext