Extracted

• • Target
    DHL_23072020_AWB_998227999_INV..exe
  • Size 727KB
  • SHA256 3ff12e5656da20f43c70d051b320420da82d2fcecdb5ea2c7acd2d6eb7ec24f6
  • MD5 4dd7913ebc45a1dde0522ba8e3357844
  • SHA1 3f778c46fb03ada5c5d3599267aa0592d0847791
  • SHA512 5f60c3735e6ed82776ef70baca2605dfe39402a152ae0f9509e3dd927ca035572ef72b6b763a73a67d185f9cad107df47c5b616741f0c50e9b21e0f819a69f54
  • MD5 SHA1 SHA512

  Score

  10^/10

  upxspyware

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2