General
- Target DHL.exe
- Size 954KB
- Sample220927-gn6nzacfg2
- SHA256 6d62cebf308b5ab873d98e0447c68f936bc34addeb924eb8ef972072ca13d4bf
- MD5 c5edb33134a17611160cd781596ce326
- SHA1 373e6779ddfa917742635699f2d13481b9a93d43
- SHA512 88dd7b4d3a24b0d7e9712734d5222d117b2c694200b6eb666b474759f1a76859487df473a3878f29fae0c9af551076ecbcfc2d90a719a3be5e70987de3c1bb18
- SSDEEP 24576:UsJVlcGUCaMC/S5OnSrw/kNedE1dR//cPEShAZfEkCS6t5dsSBg:4CaDKSSrUxdE17/OKEq63dsO
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL.exe
Resource
win10v2004-20220812-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target DHL.exe
- Size 954KB
- SHA256 6d62cebf308b5ab873d98e0447c68f936bc34addeb924eb8ef972072ca13d4bf
- MD5 c5edb33134a17611160cd781596ce326
- SHA1 373e6779ddfa917742635699f2d13481b9a93d43
- SHA512 88dd7b4d3a24b0d7e9712734d5222d117b2c694200b6eb666b474759f1a76859487df473a3878f29fae0c9af551076ecbcfc2d90a719a3be5e70987de3c1bb18
- SSDEEP 24576:UsJVlcGUCaMC/S5OnSrw/kNedE1dR//cPEShAZfEkCS6t5dsSBg:4CaDKSSrUxdE17/OKEq63dsO
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext