General
-
Target
076f4263dd45ac3fbc822c410fc7ea2bc6c755031bd87353a97b80744319132a
-
Size
1.2MB
-
Sample
221126-kkmcpsaa8v
-
MD5
bcf60c2979a2a8659ebe75b8689b23a6
-
SHA1
210e57d4280e086dcc4bde30f835eb74dbd2f3c5
-
SHA256
076f4263dd45ac3fbc822c410fc7ea2bc6c755031bd87353a97b80744319132a
-
SHA512
1bd0162001a703b45c8d23c5fbf5d7978369f1b22b2268e514025b619bd42be777310af8ef87898dc25fac8337f5ec3b90ae1898f639fd78b9d8755843ac32a3
-
SSDEEP
24576:/1LKilgudNvxTUNd/MmxZkLUaNFv9c+5KYebyFootcf40K8sZkJWuH/:/86vJUn/pZOb1/5KYeWtk4Z8ea
Static task
static1
Behavioral task
behavioral1
Sample
076f4263dd45ac3fbc822c410fc7ea2bc6c755031bd87353a97b80744319132a.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
076f4263dd45ac3fbc822c410fc7ea2bc6c755031bd87353a97b80744319132a
-
Size
1.2MB
-
MD5
bcf60c2979a2a8659ebe75b8689b23a6
-
SHA1
210e57d4280e086dcc4bde30f835eb74dbd2f3c5
-
SHA256
076f4263dd45ac3fbc822c410fc7ea2bc6c755031bd87353a97b80744319132a
-
SHA512
1bd0162001a703b45c8d23c5fbf5d7978369f1b22b2268e514025b619bd42be777310af8ef87898dc25fac8337f5ec3b90ae1898f639fd78b9d8755843ac32a3
-
SSDEEP
24576:/1LKilgudNvxTUNd/MmxZkLUaNFv9c+5KYebyFootcf40K8sZkJWuH/:/86vJUn/pZOb1/5KYeWtk4Z8ea
-
Uses the VBS compiler for execution
-
Accesses Microsoft Outlook accounts
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-