General
- Target DHL Shipping Document.exe
- Size 904KB
- Sample220822-jft2bafeh9
- SHA256 a7e7ce206966cd8a16bc3d80dc608740ea6dc81983c8a8481ad4754cc02163bc
- MD5 2b8937c2c5e826c5c699c01bab6a71d8
- SHA1 d3f4ff8c601db1d876737e6999b32fa8cd863c03
- SHA512 97096b13939044b311c6e1851f9413e3f7783bdd5f708e76a4467b4d73f355d6806f58b957987f060666cb216b55490975470b53b8d80ad0849e19a88c69bd21
- SSDEEP 12288:MfEWcBeH8qw1zG+Iv8RJ3tjfcdcvn462p5yQ2PM16sH8KL2oS:YEvBW8qwgBEFhvv4vh2P/sH8KL2
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipping Document.exe
Resource
win7-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target DHL Shipping Document.exe
- Size 904KB
- SHA256 a7e7ce206966cd8a16bc3d80dc608740ea6dc81983c8a8481ad4754cc02163bc
- MD5 2b8937c2c5e826c5c699c01bab6a71d8
- SHA1 d3f4ff8c601db1d876737e6999b32fa8cd863c03
- SHA512 97096b13939044b311c6e1851f9413e3f7783bdd5f708e76a4467b4d73f355d6806f58b957987f060666cb216b55490975470b53b8d80ad0849e19a88c69bd21
- SSDEEP 12288:MfEWcBeH8qw1zG+Iv8RJ3tjfcdcvn462p5yQ2PM16sH8KL2oS:YEvBW8qwgBEFhvv4vh2P/sH8KL2
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext