General
- Target SHIPMENT DOCS 4X20.exe
- Size 259KB
- Sample230626-sp6wxabb41
- SHA256 bd27f580c5a07f8ead5a2ead3ffa65e35e570e0d5e4e9acdc2292fdee9311cd1
- MD5 c41c7916ef07a59840b1d37c54e1afce
- SHA1 1ff5f07d0bb3f0e2274e0ac2481c784c89a3d4d7
- SHA512 c5a2cff6e2f9ebec909b48edc1fe9df77519357245c63495273ae339c8f862010f29cf475664fc3b6c71faa36de8e9d5a8def2a4a04cd7a7b1debda21a685683
- SSDEEP 6144:JYa6XdVacEHd7QUBiGalXA96GW+uFJ2UgUmYqPNU+u:JY13nodTkXA9Wf4z1y
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SHIPMENT DOCS 4X20.exe
Resource
win7-20230621-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SHIPMENT DOCS 4X20.exe
Resource
win10v2004-20230621-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target SHIPMENT DOCS 4X20.exe
- Size 259KB
- SHA256 bd27f580c5a07f8ead5a2ead3ffa65e35e570e0d5e4e9acdc2292fdee9311cd1
- MD5 c41c7916ef07a59840b1d37c54e1afce
- SHA1 1ff5f07d0bb3f0e2274e0ac2481c784c89a3d4d7
- SHA512 c5a2cff6e2f9ebec909b48edc1fe9df77519357245c63495273ae339c8f862010f29cf475664fc3b6c71faa36de8e9d5a8def2a4a04cd7a7b1debda21a685683
- SSDEEP 6144:JYa6XdVacEHd7QUBiGalXA96GW+uFJ2UgUmYqPNU+u:JY13nodTkXA9Wf4z1y
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext