Overview

overview

9

Static

static

5

DHL_AWB#60...91.exe

windows7-x64

7

DHL_AWB#60...91.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    DHL_AWB#6078538091.exe

  • Size

    1.2MB

  • Sample

    240809-js2a6ayaml

  • MD5

    ee8b9211bddd2a6978af4a1c83086ae2

  • SHA1

    8f0cf9be46915e94286d86f4eb17f46004f7fc26

  • SHA256

    2198db5427b201f1579dff76d5bdd7d64f844a9d4dc3850738d6b4b1ba63caf2

  • SHA512

    2fd6c5cf9a523ef15881553ae2c31709a2bd6623a676d62405d37cea1ba7b4b351d754653822f80954e24504f2488a09a43f78736b198a46a55f1127268b035e

  • SSDEEP

    24576:8qDEvCTbMWu7rQYlBQcBiT6rprG8aN/9Q2XhKA+TCoqb:8TvC/MTQYxsWR7aNhXJ

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      DHL_AWB#6078538091.exe

    • Size

      1.2MB

    • MD5

      ee8b9211bddd2a6978af4a1c83086ae2

    • SHA1

      8f0cf9be46915e94286d86f4eb17f46004f7fc26

    • SHA256

      2198db5427b201f1579dff76d5bdd7d64f844a9d4dc3850738d6b4b1ba63caf2

    • SHA512

      2fd6c5cf9a523ef15881553ae2c31709a2bd6623a676d62405d37cea1ba7b4b351d754653822f80954e24504f2488a09a43f78736b198a46a55f1127268b035e

    • SSDEEP

      24576:8qDEvCTbMWu7rQYlBQcBiT6rprG8aN/9Q2XhKA+TCoqb:8TvC/MTQYxsWR7aNhXJ

    Score
    9/10
    discoverycredential_accessstealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks