Analysis

  • max time kernel
    305s
  • max time network
    333s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 11:54

General

  • Target

    DHL Notification_pdf.exe

  • Size

    922KB

  • MD5

    2e20cd4c0bacb0215d89790119b4c07d

  • SHA1

    2296db4bde732ee09af6e61b6796835eca3f22fd

  • SHA256

    c531fabadc6804c5ec1a9d2741e8e3a1366baca83b70acac740b9996489df4bd

  • SHA512

    c4ee37f3d87ce9715bf6b17c518d89186d9e13a989762d031e100285df585c2c0e04ca3177ddd25d36733763cb2cd7c41f56ec2d8d9cf467bd1d04caa8abb4cd

  • SSDEEP

    12288:3iK6qU+EZX8KtiKtNGrPF7AcIzqwDGWxGGYN1Kj+4EO1p49wDdzoa1cfN:yK+RF5NqOcJwnAGYc+RO1m9wDdEPf

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\DHL Notification_pdf.exe
    "C:\Users\Admin\AppData\Local\Temp\DHL Notification_pdf.exe"
    1⤵
      PID:3784

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3784-132-0x0000000000190000-0x000000000027E000-memory.dmp
      Filesize

      952KB

    • memory/3784-133-0x0000000005420000-0x00000000059C4000-memory.dmp
      Filesize

      5.6MB

    • memory/3784-134-0x0000000004F10000-0x0000000004FA2000-memory.dmp
      Filesize

      584KB

    • memory/3784-135-0x0000000000920000-0x000000000092A000-memory.dmp
      Filesize

      40KB