General
-
Target
9507b6351c55f69c05b90d1f9aa91a976e3c5383866d991d8c0bf97682188a5a
-
Size
1.1MB
-
Sample
221126-s9l28shg8v
-
MD5
99203ece2279f8e4d612e96876981f2d
-
SHA1
b3e5bf7a0df685497b087684167ab6aa1d737247
-
SHA256
9507b6351c55f69c05b90d1f9aa91a976e3c5383866d991d8c0bf97682188a5a
-
SHA512
5a119d8cbee31dc4767976d353dbb9eb77df1b7ca79b573927d1b6df4c4ba34d58308bc70eadf7236a63e338220eb765468fa11fa356508bccaa3ed967d30a27
-
SSDEEP
24576:6h/HaSBfArBcviIMS8s6cmVM6e5YW8xT7eps1:6VaSBcKIPs6xBQYW85X
Static task
static1
Behavioral task
behavioral1
Sample
9507b6351c55f69c05b90d1f9aa91a976e3c5383866d991d8c0bf97682188a5a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9507b6351c55f69c05b90d1f9aa91a976e3c5383866d991d8c0bf97682188a5a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
9507b6351c55f69c05b90d1f9aa91a976e3c5383866d991d8c0bf97682188a5a
-
Size
1.1MB
-
MD5
99203ece2279f8e4d612e96876981f2d
-
SHA1
b3e5bf7a0df685497b087684167ab6aa1d737247
-
SHA256
9507b6351c55f69c05b90d1f9aa91a976e3c5383866d991d8c0bf97682188a5a
-
SHA512
5a119d8cbee31dc4767976d353dbb9eb77df1b7ca79b573927d1b6df4c4ba34d58308bc70eadf7236a63e338220eb765468fa11fa356508bccaa3ed967d30a27
-
SSDEEP
24576:6h/HaSBfArBcviIMS8s6cmVM6e5YW8xT7eps1:6VaSBcKIPs6xBQYW85X
-
Uses the VBS compiler for execution
-
Accesses Microsoft Outlook accounts
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-