General
- Target Shipping_documents.exe
- Size 792KB
- Sample230324-pjbl2aec37
- SHA256 c883e6286eeb6bf200ac5bf790b70ba5547f49d0fdc2b2626dccec7727fa7b70
- MD5 eeba4afea86164cdd1421e6b36477248
- SHA1 e21d13b3704da10e7871a4dbd0c0ea865f1d83a3
- SHA512 9f1e33ce5753f7260c24c2e2c6e642ec99f1f53cbb3040275aeb2beba2b7c8619604a1502b158c137c5ec6fccc4d0fe888ea7b89d262e7c4e3b56340dbacaa31
- SSDEEP 24576:I1hyipzZjFz2GXw7PLlL8thVdhfJy+ZG:I1hyipzTzBg7PehV1vZ
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Shipping_documents.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Shipping_documents.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Shipping_documents.exe
- Size 792KB
- SHA256 c883e6286eeb6bf200ac5bf790b70ba5547f49d0fdc2b2626dccec7727fa7b70
- MD5 eeba4afea86164cdd1421e6b36477248
- SHA1 e21d13b3704da10e7871a4dbd0c0ea865f1d83a3
- SHA512 9f1e33ce5753f7260c24c2e2c6e642ec99f1f53cbb3040275aeb2beba2b7c8619604a1502b158c137c5ec6fccc4d0fe888ea7b89d262e7c4e3b56340dbacaa31
- SSDEEP 24576:I1hyipzZjFz2GXw7PLlL8thVdhfJy+ZG:I1hyipzTzBg7PehV1vZ
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext