General

  • Target

    1d62532067c97c78077c1723639be3e7e377d4553f039a9c0efcd30606276f2e

  • Size

    3.5MB

  • Sample

    221124-k6hxeagc7t

  • MD5

    1f8150d5967fd805522bf1bcbca5cf19

  • SHA1

    1f6907578f1a7c516bc6c39bd943404f3145efdd

  • SHA256

    1d62532067c97c78077c1723639be3e7e377d4553f039a9c0efcd30606276f2e

  • SHA512

    6c895993e1668ad8c7b4b5ef162c471802a49b35dd8d62a22929fb987b173e5ac58d227218898c41e54a72f6a963552b1480f39e7739e0e1575f45ac5e84197c

  • SSDEEP

    49152:HVg5tQ7apIcvS45nW59NeEEsuteuw/XqU3WrU+O8KoR1PoO2+4vdf7rdzwola2tm:1g56QIZ5nLzceuuAU6ef7BzgQb4

Malware Config

Targets

    • Target

      1d62532067c97c78077c1723639be3e7e377d4553f039a9c0efcd30606276f2e

    • Size

      3.5MB

    • MD5

      1f8150d5967fd805522bf1bcbca5cf19

    • SHA1

      1f6907578f1a7c516bc6c39bd943404f3145efdd

    • SHA256

      1d62532067c97c78077c1723639be3e7e377d4553f039a9c0efcd30606276f2e

    • SHA512

      6c895993e1668ad8c7b4b5ef162c471802a49b35dd8d62a22929fb987b173e5ac58d227218898c41e54a72f6a963552b1480f39e7739e0e1575f45ac5e84197c

    • SSDEEP

      49152:HVg5tQ7apIcvS45nW59NeEEsuteuw/XqU3WrU+O8KoR1PoO2+4vdf7rdzwola2tm:1g56QIZ5nLzceuuAU6ef7BzgQb4

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks