General
-
Target
Swift copy-MT103___________________________________________________________________________________________.exe
-
Size
15KB
-
Sample
221003-hzcqpsebhp
-
MD5
d423232b851ec4d05782628579167877
-
SHA1
f379b79860c17a06ba21d2ce0a388ceb8cbeb206
-
SHA256
098c30f5be90148d97ead8f3c0aadafd8ac199d1e0207f33b7bbd203f9deff27
-
SHA512
5189f4370ac555983ec7949248bb2f7797c8fc2fffa530abca01699f27fa35ab356ce7b7366a66a33521c699491fdf44150a4e4aef8f757861e95031a10f82de
-
SSDEEP
192:aQvmrcXEyNpDjqqXtT0f4iYQ+Ilmqvpunc6nQuOKBq/qgUG2CVXhOF5I27:aqXEyNpHqatTKGWZpu5QuTU/qgJJAD
Static task
static1
Behavioral task
behavioral1
Sample
Swift copy-MT103___________________________________________________________________________________________.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Swift copy-MT103___________________________________________________________________________________________.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
Protocol: smtp- Host:
mail.lulifama.nl - Port:
587 - Username:
Sidney@lulifama.nl - Password:
5UbPvLRka8
Targets
-
-
Target
Swift copy-MT103___________________________________________________________________________________________.exe
-
Size
15KB
-
MD5
d423232b851ec4d05782628579167877
-
SHA1
f379b79860c17a06ba21d2ce0a388ceb8cbeb206
-
SHA256
098c30f5be90148d97ead8f3c0aadafd8ac199d1e0207f33b7bbd203f9deff27
-
SHA512
5189f4370ac555983ec7949248bb2f7797c8fc2fffa530abca01699f27fa35ab356ce7b7366a66a33521c699491fdf44150a4e4aef8f757861e95031a10f82de
-
SSDEEP
192:aQvmrcXEyNpDjqqXtT0f4iYQ+Ilmqvpunc6nQuOKBq/qgUG2CVXhOF5I27:aqXEyNpHqatTKGWZpu5QuTU/qgJJAD
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-