General
-
Target
8084d00ab4f95726557c2183e07610caf668448e69e4bfed8b925e763b42c9a9
-
Size
714KB
-
Sample
220309-rtt78scaen
-
MD5
c49115957fee15612db753d73b57cce5
-
SHA1
bb17085140aa44761bae46b209dbd8ac20f6ce4e
-
SHA256
8084d00ab4f95726557c2183e07610caf668448e69e4bfed8b925e763b42c9a9
-
SHA512
b4c4c59816b19c01fe61bebb364b5901e75f0704f9c98bcac1fe7292043175e5b21c9208f09a119ce2fea4e0ecdec535a7e639565a9daff05f73d34994601bd8
Static task
static1
Behavioral task
behavioral1
Sample
8084d00ab4f95726557c2183e07610caf668448e69e4bfed8b925e763b42c9a9.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
8084d00ab4f95726557c2183e07610caf668448e69e4bfed8b925e763b42c9a9.exe
Resource
win10v2004-20220310-en
Malware Config
Targets
-
-
Target
8084d00ab4f95726557c2183e07610caf668448e69e4bfed8b925e763b42c9a9
-
Size
714KB
-
MD5
c49115957fee15612db753d73b57cce5
-
SHA1
bb17085140aa44761bae46b209dbd8ac20f6ce4e
-
SHA256
8084d00ab4f95726557c2183e07610caf668448e69e4bfed8b925e763b42c9a9
-
SHA512
b4c4c59816b19c01fe61bebb364b5901e75f0704f9c98bcac1fe7292043175e5b21c9208f09a119ce2fea4e0ecdec535a7e639565a9daff05f73d34994601bd8
Score10/10-
Matiex Main Payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-