General
- Target DHL_shipment-INV_220922_21173002513.exe
- Size 16KB
- Sample220922-js9mjaaeh8
- SHA256 dbd4736b621996ab0aecc24904d7e2df5180729f7b9944ff6c7d06daa0646bce
- MD5 5b6793354fd2bace890847ea98c2aab7
- SHA1 05daf3d041e68d5289c6fb08ae06d7c32336544b
- SHA512 c04a39223a9b6986d399761e31e65dd0e546eae284027363ad2e6f42e54bff15391be1451a429dafe432dd39d09f496ac145e2657f4775b044af4331e552a16f
- SSDEEP 96:VwPZZfSpeLsGvtRbtIdY76JvigOLtx8/vQBbfHa1jtHsXnir/7/ir/SzNt:Vw6peLDvthtoOsNOLtxkcyjt+irzKrs
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL_shipment-INV_220922_21173002513.exe
Resource
win7-20220812-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL_shipment-INV_220922_21173002513.exe
Resource
win10v2004-20220812-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target DHL_shipment-INV_220922_21173002513.exe
- Size 16KB
- SHA256 dbd4736b621996ab0aecc24904d7e2df5180729f7b9944ff6c7d06daa0646bce
- MD5 5b6793354fd2bace890847ea98c2aab7
- SHA1 05daf3d041e68d5289c6fb08ae06d7c32336544b
- SHA512 c04a39223a9b6986d399761e31e65dd0e546eae284027363ad2e6f42e54bff15391be1451a429dafe432dd39d09f496ac145e2657f4775b044af4331e552a16f
- SSDEEP 96:VwPZZfSpeLsGvtRbtIdY76JvigOLtx8/vQBbfHa1jtHsXnir/7/ir/SzNt:Vw6peLDvthtoOsNOLtxkcyjt+irzKrs
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext