General
-
Target
215162379e6ff41f32a1fce51c9078ac715405735f3ad3bef17dfa04ed676457
-
Size
284KB
-
Sample
220612-kxxn7sedbl
-
MD5
bf2a8645f14f19ffac48ed3c1cf13115
-
SHA1
a0477457781068b5f8e2bf5cf3c3e484c3bcb375
-
SHA256
215162379e6ff41f32a1fce51c9078ac715405735f3ad3bef17dfa04ed676457
-
SHA512
34d2ff7c63c7daf47078fd05bd58988711c5fedef56fadacf890ea32f6c94b501c7df0918ab1d6c1dbe0e6f1a3234d71141b38e5c76e2777ca08c6f6e62ae3b5
Static task
static1
Behavioral task
behavioral1
Sample
215162379e6ff41f32a1fce51c9078ac715405735f3ad3bef17dfa04ed676457.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
215162379e6ff41f32a1fce51c9078ac715405735f3ad3bef17dfa04ed676457.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
215162379e6ff41f32a1fce51c9078ac715405735f3ad3bef17dfa04ed676457
-
Size
284KB
-
MD5
bf2a8645f14f19ffac48ed3c1cf13115
-
SHA1
a0477457781068b5f8e2bf5cf3c3e484c3bcb375
-
SHA256
215162379e6ff41f32a1fce51c9078ac715405735f3ad3bef17dfa04ed676457
-
SHA512
34d2ff7c63c7daf47078fd05bd58988711c5fedef56fadacf890ea32f6c94b501c7df0918ab1d6c1dbe0e6f1a3234d71141b38e5c76e2777ca08c6f6e62ae3b5
Score7/10-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-