Overview

overview

7

Static

static

DHLMar 202...DF.jar

windows7_x64

7

DHLMar 202...DF.jar

windows10_x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    DHLMar 2021 at 9.708BZ290PDF.jar
  • Size 98KB
  • Sample210331-tpbw7bddh6
  • SHA256 080240f1973b889a1042beea9966c3d96f3737137397d98343594afa73620447
  • MD5 SHA1 SHA512
Score
7/10
persistence

Malware Config

Targets

    • Target
      DHLMar 2021 at 9.708BZ290PDF.jar
    • Size 98KB
    • SHA256 080240f1973b889a1042beea9966c3d96f3737137397d98343594afa73620447
    • MD5 SHA1 SHA512
    Score
    7/10
    persistence

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks