Overview

overview

6

Static

static

MOD Report...22.msg

windows7-x64

6

MOD Report...22.msg

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MOD Report 11.29.22.msg

  • Size

    30KB

  • Sample

    221129-1hlldsac62

  • MD5

    75a8221be5f5d69f64b9a1f85ed3e3b4

  • SHA1

    a8980129c4c8783fd0e1ba085e7a7c2d96395ea4

  • SHA256

    16190474300ca9753857f35a810c0b0b847f7445bb7fa104469195445196002e

  • SHA512

    9d08460f6a01f9551c05e97e6b0abbc3d2778c5219d21e4343ddfee21182fc838f47840fabbadabe4ba869aa75921643145d63d49a3408726c35a792dfd55d07

  • SSDEEP

    768:i2e8sOGAnBpSp0axjBvD/WsKFWsK/3Qj:S8sFQSOa1JrWNW

Score
6/10
collection

Malware Config

Targets

    • Target

      MOD Report 11.29.22.msg

    • Size

      30KB

    • MD5

      75a8221be5f5d69f64b9a1f85ed3e3b4

    • SHA1

      a8980129c4c8783fd0e1ba085e7a7c2d96395ea4

    • SHA256

      16190474300ca9753857f35a810c0b0b847f7445bb7fa104469195445196002e

    • SHA512

      9d08460f6a01f9551c05e97e6b0abbc3d2778c5219d21e4343ddfee21182fc838f47840fabbadabe4ba869aa75921643145d63d49a3408726c35a792dfd55d07

    • SSDEEP

      768:i2e8sOGAnBpSp0axjBvD/WsKFWsK/3Qj:S8sFQSOa1JrWNW

    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks