General
- Target FEDEX_AWB.exe
- Size 628KB
- Sample230726-svsapsde89
- SHA256 4ff429625da9915e133c7c495e85cd4235813784fbc251d7259db33c77b81f29
- MD5 0c0f4b29d8f22a68af63878473d05f16
- SHA1 fc4a68398d978e96ff1a4e608b0c5e8e85f8a9b9
- SHA512 5843e53360c51684117f0e1167f8b3525ea50bdc078b713b1ca5fb3612d3fd1365b2084faaea2abf6086badcb711d9065221b986d16c998ed4fdceabec3a8c2c
- SSDEEP 12288:WJmefaynhgq63ZGiNIkW8tUZyyYy5ANvaqF+THb4or+SQk22:veCQgq24kW86y/fvFMb7tD22
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FEDEX_AWB.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FEDEX_AWB.exe
Resource
win10v2004-20230703-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target FEDEX_AWB.exe
- Size 628KB
- SHA256 4ff429625da9915e133c7c495e85cd4235813784fbc251d7259db33c77b81f29
- MD5 0c0f4b29d8f22a68af63878473d05f16
- SHA1 fc4a68398d978e96ff1a4e608b0c5e8e85f8a9b9
- SHA512 5843e53360c51684117f0e1167f8b3525ea50bdc078b713b1ca5fb3612d3fd1365b2084faaea2abf6086badcb711d9065221b986d16c998ed4fdceabec3a8c2c
- SSDEEP 12288:WJmefaynhgq63ZGiNIkW8tUZyyYy5ANvaqF+THb4or+SQk22:veCQgq24kW86y/fvFMb7tD22
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext