Extracted

Extracted

• • Target

    DHL_Shipping_Invoices_Awb_000000000101520242247820020031808174Global180030010152024.bat

  • Size

    542B

  • MD5

    415f82e7ccaa07c5907805687a010209

  • SHA1

    b9816a469c59fafb92b921a75bebecb9935277ad

  • SHA256

    ef6cf434471b7ab9a035d09dcf5c5685e7c38afc6301b337c9531bfdae73bb83

  • SHA512

    2f51a1a91dd6c86f00d7c3076ba8f1883ac714dc5d0f875f6ed38aa2ccc74511af6a6d848e01da56041c3e4cbad1bf8ac025a6b413369e1bd9e0446f7e144753

  Score

  10^/10

  discoveryexecution

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2