General

  • Target

    e7304caaf60367a96b6a716daefabb7aaad0fb73dec54ae835b0ac29973f1a13

  • Size

    2.8MB

  • Sample

    221123-hm7qbaeb47

  • MD5

    e94e3bfafe7459493e66618831b50c52

  • SHA1

    6f42cac19dd9367f0415d53ec49fd476e1232229

  • SHA256

    e7304caaf60367a96b6a716daefabb7aaad0fb73dec54ae835b0ac29973f1a13

  • SHA512

    6575ddddcb5897f8f899020f72fa20409a5952e04fd9e52e969847946b3d289fbd5ddae55a2ff3613e680b5959392a88437dd9be4eb4e04ff7344acf599c1f90

  • SSDEEP

    49152:kVg5tQ7arH5AhiTsF8SmAUgrvLjj2sm964xh3Jq6AUtfgXXPUhU4JC+:Og56RhiYFDH3yTBxvA22XsJ

Malware Config

Targets

    • Target

      e7304caaf60367a96b6a716daefabb7aaad0fb73dec54ae835b0ac29973f1a13

    • Size

      2.8MB

    • MD5

      e94e3bfafe7459493e66618831b50c52

    • SHA1

      6f42cac19dd9367f0415d53ec49fd476e1232229

    • SHA256

      e7304caaf60367a96b6a716daefabb7aaad0fb73dec54ae835b0ac29973f1a13

    • SHA512

      6575ddddcb5897f8f899020f72fa20409a5952e04fd9e52e969847946b3d289fbd5ddae55a2ff3613e680b5959392a88437dd9be4eb4e04ff7344acf599c1f90

    • SSDEEP

      49152:kVg5tQ7arH5AhiTsF8SmAUgrvLjj2sm964xh3Jq6AUtfgXXPUhU4JC+:Og56RhiYFDH3yTBxvA22XsJ

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks