Analysis
- max time kernel
119s - max time network
121s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system - submitted
08/04/2024, 14:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
DHL_AWB#6078538091.exe
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL_AWB#6078538091.exe
Resource
win10v2004-20240226-en
9 signatures
150 seconds
General
- Target DHL_AWB#6078538091.exe
- Size 1.2MB
- Sample240408-rfjvcaec6t
- SHA256 2f126ec0408040b102ea8df4cd28074942bc40ce94f68f75353b38e7564ac7b9
- MD5 c24b65d3318d94c0c913784a4e991c1b
- SHA1 51110e23c1accad85285cf7b502292dab92805c2
- SHA512 12b610814359bf338780f2d78ee9a140791f53f7d9a3f4c91fdf9b6720652a1ce3a9a4251dcc515e6da2b44acfa7c3868b130364c7f65c7e96b9d7761a2380a6
- SSDEEP 24576:fqDEvCTbMWu7rQYlBQcBiT6rprG8a6SdaeRSMSfcbnGwu3FVm:fTvC/MTQYxsWR7a6S1kM7Gn1V
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1844 DHL_AWB#6078538091.exe 1844 DHL_AWB#6078538091.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1844 DHL_AWB#6078538091.exe 1844 DHL_AWB#6078538091.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\plainstones
- Size 252KB
- SHA256 f4518434865642520e9fe0c704a80f59608807ecc528e1c125aabadfa13574b6
- MD5 76827b678a5d5e3c6411ea159e6e43eb
- SHA1 25b40501691141a77503220692227caa54cbb9bc
- SHA512 ba03a2f5227a9ec6808445214c922686d39b9c72799c92e126bf0d4cb044ec5515f956af74e953371eb25d1bc99e181b0a7c86a63c190b9d93f3a1607d3fe816
- SSDEEP 6144:Cscbzg9Feu9WXHq2t9EftTPQTYmqjmKJVEoRz+TD80k:ChPg9FaXHqoixXuF8d
- MD5 SHA1 SHA512 SSDEEP