General
- Target SHIPPING DOC.exe
- Size 456KB
- Sample230124-crvcwsgd79
- SHA256 41d58a31e2befb91705b4630f2cc48bfe9c09d5c26aee2034e5279b7bb314f4c
- MD5 be6e96850422bc9cbbb53dd6bffb461b
- SHA1 502489e466ddec0511a88292101e70fa1d8bb2e5
- SHA512 7b209a45562afc4e805b48850480860704a432dab03a0860368a3bb79dbf286c5342ff15ee0251b4c60eb09640a3757643ffc9f53dfdccb12ab420ef10fc5a22
- SSDEEP 12288:6+oz8UuenRwLncmnTBSX/+MD2SD2WrUHMQOfT:6+KLaLncmTBSXrD5D2iU9kT
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING DOC.exe
Resource
win7-20220901-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
SHIPPING DOC.exe
Resource
win10v2004-20221111-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target SHIPPING DOC.exe
- Size 456KB
- SHA256 41d58a31e2befb91705b4630f2cc48bfe9c09d5c26aee2034e5279b7bb314f4c
- MD5 be6e96850422bc9cbbb53dd6bffb461b
- SHA1 502489e466ddec0511a88292101e70fa1d8bb2e5
- SHA512 7b209a45562afc4e805b48850480860704a432dab03a0860368a3bb79dbf286c5342ff15ee0251b4c60eb09640a3757643ffc9f53dfdccb12ab420ef10fc5a22
- SSDEEP 12288:6+oz8UuenRwLncmnTBSX/+MD2SD2WrUHMQOfT:6+KLaLncmTBSXrD5D2iU9kT
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext