General
-
Target
9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472
-
Size
320KB
-
Sample
221206-gvavwaah47
-
MD5
358c190a4987765cd80fbdac29da3ced
-
SHA1
3abfd5446169a85446ef8b23cfe73a35bfdf9e21
-
SHA256
9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472
-
SHA512
4d51d70e3663de93df957c298d4dccb227674b0d1d9ce8ff5e9e150628697763a1c9ee736cf5a55a37f0501121696f1de091a199491673654da078bc707710b6
-
SSDEEP
3072:i08XpGWT8yTXQqnLLftJJLg5aOxNYMjMtAqmKylcIi5iq4qwjxbEMJds0Svt:At8yT/LLVJJLTmYMjMtAqZlIQi59EcF
Static task
static1
Behavioral task
behavioral1
Sample
9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472
-
Size
320KB
-
MD5
358c190a4987765cd80fbdac29da3ced
-
SHA1
3abfd5446169a85446ef8b23cfe73a35bfdf9e21
-
SHA256
9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472
-
SHA512
4d51d70e3663de93df957c298d4dccb227674b0d1d9ce8ff5e9e150628697763a1c9ee736cf5a55a37f0501121696f1de091a199491673654da078bc707710b6
-
SSDEEP
3072:i08XpGWT8yTXQqnLLftJJLg5aOxNYMjMtAqmKylcIi5iq4qwjxbEMJds0Svt:At8yT/LLVJJLTmYMjMtAqZlIQi59EcF
-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-