Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    05/08/2024, 12:55

General

  • Target

    DHL PACKAGE .exe

  • Size

    279KB

  • MD5

    c2be3307806b75889db5e7d94d77ee9c

  • SHA1

    158d178146dcdd13e7373b98eb8f23b3ebebec6f

  • SHA256

    32213d59734799de18a3f9d2dc2fadc726032368f33eccbc703fe8dfb7b38f92

  • SHA512

    078fa4ed66969a86e44cd2912a73e23ca1085b84c789cbdac761d5a5adb459e5d74737b23e054d2940082131ce98f1404324bb7bd672a5ff390aadd1b2edb66c

  • SSDEEP

    6144:A8tzZhUyzWNT1U/ZtjSOgUsHO+Ub8DK6OM6ND951ywWABEyHoi6:ASkNBU/ZtpkF+6d6F93HW6nHoi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DHL PACKAGE .exe
    "C:\Users\Admin\AppData\Local\Temp\DHL PACKAGE .exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2180-0-0x00000000003C1000-0x00000000003C4000-memory.dmp

    Filesize

    12KB

  • memory/2180-1-0x00000000003C0000-0x0000000000406000-memory.dmp

    Filesize

    280KB

  • memory/2180-2-0x00000000003C1000-0x00000000003C4000-memory.dmp

    Filesize

    12KB

  • memory/2180-3-0x00000000003C0000-0x0000000000406000-memory.dmp

    Filesize

    280KB

  • memory/2180-4-0x00000000003C0000-0x0000000000406000-memory.dmp

    Filesize

    280KB

  • memory/2180-5-0x00000000003C0000-0x0000000000406000-memory.dmp

    Filesize

    280KB