General

  • Target

    TNT AWB TRACKING DETAILS.exe

  • Size

    1.1MB

  • Sample

    220907-l3crnaghdr

  • MD5

    af2b0d11a687fd10140589cbd3dd8681

  • SHA1

    6999f61032cf9068d570b0cf7dda8ad33e969243

  • SHA256

    2c4085e3a6b291a0998f6caf049700e186221fdb4ada3c4d02ddac4ed8ff3d57

  • SHA512

    45ee546f86b15022ddd07ee6093425565ebf92fdaa71ae79a2af26416d8e9b19a35de8c5802c9dda4b6fb8a6f7b7159465bdfd4eff613ce3e03358a74c3ceb7a

  • SSDEEP

    24576:SvhSvyVs/Xp/+tF373R0Auo3MjS8NaE6L0:SJSlPxiF37hPMjSUas

Malware Config

Targets

    • Target

      TNT AWB TRACKING DETAILS.exe

    • Size

      1.1MB

    • MD5

      af2b0d11a687fd10140589cbd3dd8681

    • SHA1

      6999f61032cf9068d570b0cf7dda8ad33e969243

    • SHA256

      2c4085e3a6b291a0998f6caf049700e186221fdb4ada3c4d02ddac4ed8ff3d57

    • SHA512

      45ee546f86b15022ddd07ee6093425565ebf92fdaa71ae79a2af26416d8e9b19a35de8c5802c9dda4b6fb8a6f7b7159465bdfd4eff613ce3e03358a74c3ceb7a

    • SSDEEP

      24576:SvhSvyVs/Xp/+tF373R0Auo3MjS8NaE6L0:SJSlPxiF37hPMjSUas

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks