General
- Target CCTV-Tutmak.exe
- Size 3.2MB
- Sample220615-hkr7vaaccj
- SHA256 07a775e0ce0b693e7fe1b7b0175b2951f52bef2ae0ca2d150efc0f40079c735a
- MD5 cdd5d96b4fbe367300933ef23ae8bd9f
- SHA1 368c186885e3f3c63970b2d92d5c50fb28ca9050
- SHA512 7c1db0154523538949138d82aab20d858dde06f6666449ff818fd43392d463bbb4d410c7cc5ba724a913a06456a148874472996af4a303bebc9308eac276eb00
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
CCTV-Tutmak.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
CCTV-Tutmak.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target CCTV-Tutmak.exe
- Size 3.2MB
- SHA256 07a775e0ce0b693e7fe1b7b0175b2951f52bef2ae0ca2d150efc0f40079c735a
- MD5 cdd5d96b4fbe367300933ef23ae8bd9f
- SHA1 368c186885e3f3c63970b2d92d5c50fb28ca9050
- SHA512 7c1db0154523538949138d82aab20d858dde06f6666449ff818fd43392d463bbb4d410c7cc5ba724a913a06456a148874472996af4a303bebc9308eac276eb00
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles