Overview

overview

7

Static

static

3

DHL Origin...ts.exe

windows10-2004-x64

7

DHL Origin...ts.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    DHL Original Shipping Documents.exe
  • Size 951KB
  • Sample251202-jxt3msfv9h
  • SHA256 dec24a14f83ed2a0c6fdb82fc2e3e08ee48fc0b3c2d2ddef2cdb4450c9930202
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
collectiondiscoveryspywarestealer

Malware Config

Targets

    • Target
      DHL Original Shipping Documents.exe
    • Size 951KB
    • SHA256 dec24a14f83ed2a0c6fdb82fc2e3e08ee48fc0b3c2d2ddef2cdb4450c9930202
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    collectiondiscoveryspywarestealer

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks