General
- Target DHL Shipment doc.exe
- Size 856KB
- Sample220830-wdevtseac9
- SHA256 8277159c5821b9c8c699fba65eb77532da18b0de22d6052d0fdc3377f9732fe4
- MD5 00d5b19cc659c5c49fc28a52290b7638
- SHA1 81a0811626b854d4db23e495310d5aa10c124102
- SHA512 1fc5a41adb85380b29c4880517f103e472f96443e5408e6e310d134543c9e5d0355b891e18a45f2a19e58a9d26cc5d67cdb8ff42b36c5db55c978be8a1c2bc94
- SSDEEP 12288:4y2rXsTEOu4Lz82jIswTC9LcEtzbOczfloa1VO47xU7FscO1ET8XaT0gFCrWEE6O:4y27V34LP82JOczqUVO47xU7A17XaL
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipment doc.exe
Resource
win7-20220812-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL Shipment doc.exe
Resource
win10v2004-20220812-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target DHL Shipment doc.exe
- Size 856KB
- SHA256 8277159c5821b9c8c699fba65eb77532da18b0de22d6052d0fdc3377f9732fe4
- MD5 00d5b19cc659c5c49fc28a52290b7638
- SHA1 81a0811626b854d4db23e495310d5aa10c124102
- SHA512 1fc5a41adb85380b29c4880517f103e472f96443e5408e6e310d134543c9e5d0355b891e18a45f2a19e58a9d26cc5d67cdb8ff42b36c5db55c978be8a1c2bc94
- SSDEEP 12288:4y2rXsTEOu4Lz82jIswTC9LcEtzbOczfloa1VO47xU7FscO1ET8XaT0gFCrWEE6O:4y27V34LP82JOczqUVO47xU7A17XaL
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext