General
- Target DHL_IMPORT_TAX__INVOICE_3129143010_KRJ202318092409sq.exe
- Size 1.1MB
- Sample230718-hccgesgf79
- SHA256 579decb14fc21f6ab8e520a2eacb56ffc1bc573df67356fc6cedc108bd8cea8e
- MD5 d5fb520198fb28dc645a8757fcd7dea3
- SHA1 03a79f6b3a52df8c65285f10b71341f70a7707ae
- SHA512 ed61ff97cec3a6aca8c2d1513d28cd2ba1c7692da0ea40d6eb2b1c94747dbde3b698094703f393aa59581af0c2e9f2655522a601e3a4e93753e866ab7bb37668
- SSDEEP 24576:fqnzg/xqtGzIGHe/eXvmHTRCI/smwGhxVFUk+1pl:WzIYsHe9TRlk6W
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DHL_IMPORT_TAX__INVOICE_3129143010_KRJ202318092409sq.exe
Resource
win7-20230712-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL_IMPORT_TAX__INVOICE_3129143010_KRJ202318092409sq.exe
Resource
win10v2004-20230703-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target DHL_IMPORT_TAX__INVOICE_3129143010_KRJ202318092409sq.exe
- Size 1.1MB
- SHA256 579decb14fc21f6ab8e520a2eacb56ffc1bc573df67356fc6cedc108bd8cea8e
- MD5 d5fb520198fb28dc645a8757fcd7dea3
- SHA1 03a79f6b3a52df8c65285f10b71341f70a7707ae
- SHA512 ed61ff97cec3a6aca8c2d1513d28cd2ba1c7692da0ea40d6eb2b1c94747dbde3b698094703f393aa59581af0c2e9f2655522a601e3a4e93753e866ab7bb37668
- SSDEEP 24576:fqnzg/xqtGzIGHe/eXvmHTRCI/smwGhxVFUk+1pl:WzIYsHe9TRlk6W
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL