General
-
Target
67de7a2a3b190e750303ba57a741b844c805d755ec5ef2032dbf48636dd1c43f
-
Size
1.2MB
-
Sample
221220-vswapaad88
-
MD5
2bee88f974655fedd5fd4001cb09534a
-
SHA1
385381c2e8f635745757990fdb2e65805d294032
-
SHA256
67de7a2a3b190e750303ba57a741b844c805d755ec5ef2032dbf48636dd1c43f
-
SHA512
f5245142675a08aa86c1ae7c422ebb54d0cc2b0b5157144e1dd2a0ad1ab52a4980372b29fa548d9fd5da0712840cf5c47d765a64e6bb1907f07335ff651fba9e
-
SSDEEP
24576:LWmQJOsWwTTI1inNnp45/6yvZk/WJdyXnDBZQTKbDjg5eEvHBLkB8LGI8YcG/7Fw:CmQJ5g6kH7wI/Rk+LO+Fc
Static task
static1
Behavioral task
behavioral1
Sample
67de7a2a3b190e750303ba57a741b844c805d755ec5ef2032dbf48636dd1c43f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67de7a2a3b190e750303ba57a741b844c805d755ec5ef2032dbf48636dd1c43f.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
67de7a2a3b190e750303ba57a741b844c805d755ec5ef2032dbf48636dd1c43f
-
Size
1.2MB
-
MD5
2bee88f974655fedd5fd4001cb09534a
-
SHA1
385381c2e8f635745757990fdb2e65805d294032
-
SHA256
67de7a2a3b190e750303ba57a741b844c805d755ec5ef2032dbf48636dd1c43f
-
SHA512
f5245142675a08aa86c1ae7c422ebb54d0cc2b0b5157144e1dd2a0ad1ab52a4980372b29fa548d9fd5da0712840cf5c47d765a64e6bb1907f07335ff651fba9e
-
SSDEEP
24576:LWmQJOsWwTTI1inNnp45/6yvZk/WJdyXnDBZQTKbDjg5eEvHBLkB8LGI8YcG/7Fw:CmQJ5g6kH7wI/Rk+LO+Fc
-
Blocklisted process makes network request
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-