General
-
Target
6447d2fbc57f05f5f7a1c3f03cb57eb426b783ece4cb5858054edac65e92b091
-
Size
624KB
-
Sample
221001-2lz4mabfgm
-
MD5
758d2c360349aec78dca2f6867166710
-
SHA1
344947e4c696c0a8e98c4696fe776d5586773acb
-
SHA256
6447d2fbc57f05f5f7a1c3f03cb57eb426b783ece4cb5858054edac65e92b091
-
SHA512
08d821d9a2623ea5550c9a24ff85a3a4f0e1850d5ed404a5804ac599ef7a8737a133d3674319b9ee4247a7dfc4397b60aca73b7ef04daa8ef406a2a9b1eb87da
-
SSDEEP
12288:XcLQRGw4W1xZ++u9YixSRsGFV4ljdw8h2qCwk4:XjRG/W1xZ+J9pSCM4lJ
Static task
static1
Behavioral task
behavioral1
Sample
6447d2fbc57f05f5f7a1c3f03cb57eb426b783ece4cb5858054edac65e92b091.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6447d2fbc57f05f5f7a1c3f03cb57eb426b783ece4cb5858054edac65e92b091.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
6447d2fbc57f05f5f7a1c3f03cb57eb426b783ece4cb5858054edac65e92b091
-
Size
624KB
-
MD5
758d2c360349aec78dca2f6867166710
-
SHA1
344947e4c696c0a8e98c4696fe776d5586773acb
-
SHA256
6447d2fbc57f05f5f7a1c3f03cb57eb426b783ece4cb5858054edac65e92b091
-
SHA512
08d821d9a2623ea5550c9a24ff85a3a4f0e1850d5ed404a5804ac599ef7a8737a133d3674319b9ee4247a7dfc4397b60aca73b7ef04daa8ef406a2a9b1eb87da
-
SSDEEP
12288:XcLQRGw4W1xZ++u9YixSRsGFV4ljdw8h2qCwk4:XjRG/W1xZ+J9pSCM4lJ
-
Uses the VBS compiler for execution
-
Accesses Microsoft Outlook accounts
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-