General
-
Target
a39a6c4b08db9f9d27ec01de56983c74a80cd0cd5ba8627bacb07bfb1115423f
-
Size
274KB
-
Sample
221206-ebc5sahc75
-
MD5
bb94a2aa7b60595d08ef12463e559fad
-
SHA1
3827ba7e4444ca3b249ab2eb3c2182353f92f46f
-
SHA256
a39a6c4b08db9f9d27ec01de56983c74a80cd0cd5ba8627bacb07bfb1115423f
-
SHA512
8875124e2d3e2396a8e707b29539595c3b02ded8f925abe9d83dc5120e56d6a8cc59d2fdd10618d307686bcbef403320ec104352e50853c545d946e50437a0ce
-
SSDEEP
3072:oWXVWdi1YUO28RpfxnOXWR5sJV5wWt61wvguBeVcyojMWuiVRvJTcpO0totVmYgw:o+w7fxnaJYW+WxBP4WuIDck0toXuVS
Static task
static1
Behavioral task
behavioral1
Sample
a39a6c4b08db9f9d27ec01de56983c74a80cd0cd5ba8627bacb07bfb1115423f.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
a39a6c4b08db9f9d27ec01de56983c74a80cd0cd5ba8627bacb07bfb1115423f
-
Size
274KB
-
MD5
bb94a2aa7b60595d08ef12463e559fad
-
SHA1
3827ba7e4444ca3b249ab2eb3c2182353f92f46f
-
SHA256
a39a6c4b08db9f9d27ec01de56983c74a80cd0cd5ba8627bacb07bfb1115423f
-
SHA512
8875124e2d3e2396a8e707b29539595c3b02ded8f925abe9d83dc5120e56d6a8cc59d2fdd10618d307686bcbef403320ec104352e50853c545d946e50437a0ce
-
SSDEEP
3072:oWXVWdi1YUO28RpfxnOXWR5sJV5wWt61wvguBeVcyojMWuiVRvJTcpO0totVmYgw:o+w7fxnaJYW+WxBP4WuIDck0toXuVS
-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-