General
- Target FEDEX_AWB_INVOICE.exe
- Size 678KB
- Sample230730-h2phaahd5z
- SHA256 bfb1e4ae02e8f53a6d2023eeda4399be5502b9ab99770c9c3e4bfde0548a459b
- MD5 59f195d834f5a358744ee32684e112ae
- SHA1 a5fa7839e7fb2634efe7aa61e28cd7889594cc09
- SHA512 b348f1b12afd0950237db29605a2b6409e595ba61d8aa40ae715028abc785e61344ddfc2bafac4bfed4a22b96988f7b86aef0c5285cb555b19c04752e1f79cb9
- SSDEEP 12288:p0gjj8cSwkbHh4j8FAVVbxtYtRiHPsJJhQFfvvEe+OnwwMN:p0gjj+wT8FAbiiHPsJcFfXEeqwM
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FEDEX_AWB_INVOICE.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FEDEX_AWB_INVOICE.exe
Resource
win10v2004-20230703-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target FEDEX_AWB_INVOICE.exe
- Size 678KB
- SHA256 bfb1e4ae02e8f53a6d2023eeda4399be5502b9ab99770c9c3e4bfde0548a459b
- MD5 59f195d834f5a358744ee32684e112ae
- SHA1 a5fa7839e7fb2634efe7aa61e28cd7889594cc09
- SHA512 b348f1b12afd0950237db29605a2b6409e595ba61d8aa40ae715028abc785e61344ddfc2bafac4bfed4a22b96988f7b86aef0c5285cb555b19c04752e1f79cb9
- SSDEEP 12288:p0gjj8cSwkbHh4j8FAVVbxtYtRiHPsJJhQFfvvEe+OnwwMN:p0gjj+wT8FAbiiHPsJcFfXEeqwM
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext