General
-
Target
RT 009435 PO-20220207.pdf(78KB).exe
-
Size
344KB
-
Sample
220207-jz1cfahgb4
-
MD5
2c9e55d24d5853836195834ea08d31ba
-
SHA1
d4b531649a46e252dbaa6bdb279b9dc18d8b3bd4
-
SHA256
524881f1bcc00d0a27ab7829b776e32844b3e9f19cea0bfae32b95a6a8006ffc
-
SHA512
8fe29a8a484016b335ceb85d417f0375d59f5e2995c734d65cf8c4c10b787520cf1bca6475d6b07cb027b5410fe8155003c0668d70b4b7eb21be31fbdd8644cd
Static task
static1
Behavioral task
behavioral1
Sample
RT 009435 PO-20220207.pdf(78KB).exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
RT 009435 PO-20220207.pdf(78KB).exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
RT 009435 PO-20220207.pdf(78KB).exe
-
Size
344KB
-
MD5
2c9e55d24d5853836195834ea08d31ba
-
SHA1
d4b531649a46e252dbaa6bdb279b9dc18d8b3bd4
-
SHA256
524881f1bcc00d0a27ab7829b776e32844b3e9f19cea0bfae32b95a6a8006ffc
-
SHA512
8fe29a8a484016b335ceb85d417f0375d59f5e2995c734d65cf8c4c10b787520cf1bca6475d6b07cb027b5410fe8155003c0668d70b4b7eb21be31fbdd8644cd
Score10/10-
Adds policy Run key to start application
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-