General
- Target dhl document.exe
- Size 720KB
- Sample230130-psc68aca4y
- SHA256 6fb3acde9beaf21f5df873c07ad0c10d24273aeb55a5d4e9fdb07dcb2307d670
- MD5 7325cee9bb7f4f96d6d0eb0e328c5cd7
- SHA1 99c616292a0506ad9c8c6f54ef3f6a40697984c8
- SHA512 8e19b85eb39a89b441c564d3d31be262ab2e7bbf784ab70b1f1f3a549efcc7184b9b98dc09c29efc952a6089c5bda331460ac8dfdf0330aaa4981d8074f6c530
- SSDEEP 12288:bZaoro6SQnK07YHTZVGFh8ibqRBCHNYP0enLSDxWeh3ih9HcA:bgorHdnz0ziFWo2CH68YLoxBYTV
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
dhl document.exe
Resource
win7-20220901-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
dhl document.exe
Resource
win10v2004-20220812-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target dhl document.exe
- Size 720KB
- SHA256 6fb3acde9beaf21f5df873c07ad0c10d24273aeb55a5d4e9fdb07dcb2307d670
- MD5 7325cee9bb7f4f96d6d0eb0e328c5cd7
- SHA1 99c616292a0506ad9c8c6f54ef3f6a40697984c8
- SHA512 8e19b85eb39a89b441c564d3d31be262ab2e7bbf784ab70b1f1f3a549efcc7184b9b98dc09c29efc952a6089c5bda331460ac8dfdf0330aaa4981d8074f6c530
- SSDEEP 12288:bZaoro6SQnK07YHTZVGFh8ibqRBCHNYP0enLSDxWeh3ih9HcA:bgorHdnz0ziFWo2CH68YLoxBYTV
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext