General
-
Target
a47eb1d570bbadbaf894566f457658e1aa4b415f753f79feda822260f5e095a6.exe
-
Size
340KB
-
Sample
221206-dflr2shc43
-
MD5
d814c856c4d27057e47d2be18cb5daff
-
SHA1
186e104de0cb0ce346712821e4f56115bcbd3942
-
SHA256
a47eb1d570bbadbaf894566f457658e1aa4b415f753f79feda822260f5e095a6
-
SHA512
ea200646470b4ca146d17a95aaef375acb19088d13f5659f42aa377cf3da7d6cdb7fb3239749525354b30608ceb6da0d18e1f28c1277d47b56607a2f34c0808a
-
SSDEEP
6144:7+PM7UVfrmeVyFblTtaxN3PmOBymlglZoBYG1PF:7+PZVeTtarPmOByWglu6G
Static task
static1
Behavioral task
behavioral1
Sample
a47eb1d570bbadbaf894566f457658e1aa4b415f753f79feda822260f5e095a6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a47eb1d570bbadbaf894566f457658e1aa4b415f753f79feda822260f5e095a6.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
a47eb1d570bbadbaf894566f457658e1aa4b415f753f79feda822260f5e095a6.exe
-
Size
340KB
-
MD5
d814c856c4d27057e47d2be18cb5daff
-
SHA1
186e104de0cb0ce346712821e4f56115bcbd3942
-
SHA256
a47eb1d570bbadbaf894566f457658e1aa4b415f753f79feda822260f5e095a6
-
SHA512
ea200646470b4ca146d17a95aaef375acb19088d13f5659f42aa377cf3da7d6cdb7fb3239749525354b30608ceb6da0d18e1f28c1277d47b56607a2f34c0808a
-
SSDEEP
6144:7+PM7UVfrmeVyFblTtaxN3PmOBymlglZoBYG1PF:7+PZVeTtarPmOByWglu6G
-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-