General
- Target DHL Shipment documents.exe
- Size 932KB
- Sample220822-jgeb9affa3
- SHA256 8f1c0906f013938aba4f1da70a773afc04c8fcf3640a9f4224d9e997eddb4a2f
- MD5 ff3a0f66d491103dfad0041f8b04ab35
- SHA1 3e4504d01293be0483d1c218dd7b7600b9176180
- SHA512 089bffad0afff4cbbfdf45548a6c90074d93e6e07075eb0d1dbcebb6f53605314cbf8b72893485306be38d57415804c7dce63e0338e326de0e55a52d9d1487ab
- SSDEEP 12288:/fEWcBeQ1zEr5pExbEaHn6SB+xebQJ/96tNxn2oS:XEvBVelpibEYn6xeQYz2
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipment documents.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL Shipment documents.exe
Resource
win10v2004-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target DHL Shipment documents.exe
- Size 932KB
- SHA256 8f1c0906f013938aba4f1da70a773afc04c8fcf3640a9f4224d9e997eddb4a2f
- MD5 ff3a0f66d491103dfad0041f8b04ab35
- SHA1 3e4504d01293be0483d1c218dd7b7600b9176180
- SHA512 089bffad0afff4cbbfdf45548a6c90074d93e6e07075eb0d1dbcebb6f53605314cbf8b72893485306be38d57415804c7dce63e0338e326de0e55a52d9d1487ab
- SSDEEP 12288:/fEWcBeQ1zEr5pExbEaHn6SB+xebQJ/96tNxn2oS:XEvBVelpibEYn6xeQYz2
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext