Overview

overview

7

Static

static

3

Shipping d...in.exe

windows7-x64

7

Shipping d...in.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Shipping documentsInvoice and Packing List, Certificate of Origin.rar

  • Size

    648KB

  • Sample

    231116-txr86aed31

  • MD5

    80a1a1d88464cb28a847d511af8c87dc

  • SHA1

    a4a415563ca4084138e39c3180e348c5833ff907

  • SHA256

    8ed132af34e760ef8a2c14981304d40c962a348c519b3861e1c496680ae1aa17

  • SHA512

    26d513d1ec3c9694ec9c537b8a5084b93ffdfe0ccc0a0cb04a8fe46b97877509552f03cf9d33c45290cedb45013e52d8d84e797e5b05b2722ee2172b4ba41a99

  • SSDEEP

    12288:AMgZ1F7toS1jF1gbgYeuQx6X1K0UH9nqxalHlas/nqo6kxgs:6Z1F7toSdFug1y1oHBYabaOiggs

Score
7/10

Malware Config

Targets

    • Target

      Shipping documentsInvoice and Packing List, Certificate of Origin.exe

    • Size

      733KB

    • MD5

      bcf863eaa53ffbe804fc5e6bcfe2b424

    • SHA1

      e269c72b732a9ba59730e21dfa774bd64be4567d

    • SHA256

      eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3

    • SHA512

      34420d896b329281237410bc2fe38d90a36df3f483798a6cf36d04681ef7b4399c4378d8ad215df8bf684f09f964029b2ea1fd7d615011fed2187a6d780683aa

    • SSDEEP

      12288:TtelauPWgC8b4+VYlPTIGll7vXWPtNWYNqNcy+fI0V8xY9tZv0u/TrWo8vMSPQhI:OWV8b4e0IGlFG2LNcyF0V8Ec

    Score
    7/10

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks