Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
10-07-2023 07:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DHL.exe
Resource
win7-20230703-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
DHL.exe
-
Size
834KB
-
MD5
3a4aee7b25d75b53216a78ae8fb193eb
-
SHA1
0707830fe0a8bc4f820db00a8aa87321be525ac9
-
SHA256
92c1f1dd75e3a58e8cc9db8db46f742bf5748a7af92d9439a7d6fbe84d2b6697
-
SHA512
2899261e472f4626ca97f3c45e9e3de60c822624fd107e85d6d41a89351c15d321b77f08d343af9c4ad37153ee0f56183c539b60aaaf7ade5e52fb83192a248a
-
SSDEEP
12288:OkaMrcbbHMmNdpHsKr8rLZd4IcJVb9j1tL4EyVMDNc8AF9sbhz/sVijP8DcTN:N33RYbt34EyV+AF9sh/sVgPcsN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3748 3136 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL.exe"C:\Users\Admin\AppData\Local\Temp\DHL.exe"1⤵PID:3136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3136 -s 11802⤵
- Program crash
PID:3748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3136 -ip 31361⤵PID:1388