General
-
Target
8046f1d7935e9a1b3b3a426f1ef001b087c7aab8c55834dbb48eb3a0da40007e
-
Size
3.3MB
-
Sample
221129-r1qtdshd99
-
MD5
d5d9043d6ddff5cc436e065d447531a5
-
SHA1
21ccbed51c717ca3e5605dad8df2e73772b51ff9
-
SHA256
8046f1d7935e9a1b3b3a426f1ef001b087c7aab8c55834dbb48eb3a0da40007e
-
SHA512
cc7392bc0191857c5dc6921db083330b18ea99523372e5270ee92aef0ef0b061e99dd846572e2a85fa4f227022fa8594db14c68ae992eeaadba41463ebfe3ce9
-
SSDEEP
49152:QAJYaS9FFNGvLR9Zn8tIGRH3pLsDzTMbp8TbyGPkGzki0l+ROOROhRpFSS21MzvE:7JYZFU9ZfG3YDzTt9cGzki2adRU+tW4
Static task
static1
Behavioral task
behavioral1
Sample
8046f1d7935e9a1b3b3a426f1ef001b087c7aab8c55834dbb48eb3a0da40007e.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
8046f1d7935e9a1b3b3a426f1ef001b087c7aab8c55834dbb48eb3a0da40007e
-
Size
3.3MB
-
MD5
d5d9043d6ddff5cc436e065d447531a5
-
SHA1
21ccbed51c717ca3e5605dad8df2e73772b51ff9
-
SHA256
8046f1d7935e9a1b3b3a426f1ef001b087c7aab8c55834dbb48eb3a0da40007e
-
SHA512
cc7392bc0191857c5dc6921db083330b18ea99523372e5270ee92aef0ef0b061e99dd846572e2a85fa4f227022fa8594db14c68ae992eeaadba41463ebfe3ce9
-
SSDEEP
49152:QAJYaS9FFNGvLR9Zn8tIGRH3pLsDzTMbp8TbyGPkGzki0l+ROOROhRpFSS21MzvE:7JYZFU9ZfG3YDzTt9cGzki2adRU+tW4
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-