f9ffa58b5dd142b4f6e87a1c7fb8915a1d2054c5ffeda62eab078c8f5b1ef644 | Triage

Sharing

General

Target

FedEx Shipment doc.exe
Size

1023KB
Sample

221230-jdj4bsad9s
MD5

18de2e338f8ebe55f152a8ba52742175
SHA1

cd5538e2c8bc84605d5b5997596bf3d37872757d
SHA256

f9ffa58b5dd142b4f6e87a1c7fb8915a1d2054c5ffeda62eab078c8f5b1ef644
SHA512

f554a6e43e63e53248bff7227aa348551fa04bf1067ae8806978caca598e271835672e2f555c2fe1c77fbdfd21f6cd5b5d574729cfbc18fb586925ed5736c18a
SSDEEP

12288:lBp2iN1/Sr+p1kZdu8oNVHiy84VHKmZ5cLfEg5yBqVxRH8c+9eFf+mDXttarruVI:lL1e+1k/W5ilaHkjEUKq5H80

Score

7^/10

Malware Config

Targets

- Target
  
  FedEx Shipment doc.exe
- Size
  
  1023KB
- MD5
  
  18de2e338f8ebe55f152a8ba52742175
- SHA1
  
  cd5538e2c8bc84605d5b5997596bf3d37872757d
- SHA256
  
  f9ffa58b5dd142b4f6e87a1c7fb8915a1d2054c5ffeda62eab078c8f5b1ef644
- SHA512
  
  f554a6e43e63e53248bff7227aa348551fa04bf1067ae8806978caca598e271835672e2f555c2fe1c77fbdfd21f6cd5b5d574729cfbc18fb586925ed5736c18a
- SSDEEP
  
  12288:lBp2iN1/Sr+p1kZdu8oNVHiy84VHKmZ5cLfEg5yBqVxRH8c+9eFf+mDXttarruVI:lL1e+1k/W5ilaHkjEUKq5H80
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2