Overview

overview

7

Static

static

TT PAYMENT.exe

windows7-x64

6

TT PAYMENT.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TT PAYMENT.zip

  • Size

    15KB

  • Sample

    230131-nt1s8sgb49

  • MD5

    f696ba2710cadce82ae23e72904f9c25

  • SHA1

    c658bf8a9ebaaf13f292209c2367db603d4ed94a

  • SHA256

    9848cbed714fbf0ecdc2b288b9ee6dedc8a6d314f44fbb1e86a7726d785c4d6f

  • SHA512

    91e888f289f2449143fe21fc89c113d070b21d0c58c445d0a67abda07ef8e2b11d2ff46dff143f9c1a2b9a9ab453e418739e80c0cb4918872a9ebd966b5dc615

  • SSDEEP

    384:INn/O0zx2Xn8qSsL78Z3s4aAMpYP9FH1kXAD1WPm:Id/QSsL78Z3sHAM21FH1kQRWPm

Score
7/10
collection

Malware Config

Targets

    • Target

      TT PAYMENT.exe

    • Size

      37KB

    • MD5

      9e631a5fa5204abd46257da5000926e8

    • SHA1

      8ac06686f7e9a9c998aa6819d589e8eee181db7e

    • SHA256

      9d58b6f6afb9a8237df181b9d0e1a250d122acd5d36208a3d2d7368bb9d25984

    • SHA512

      511e13d446bfeca84ab00cac6fffbc85b8ca86e33f94d13d018be7a3ef35632431530befa0add265a400dd27be6784eb00910c368a8e3fa756771588a697961f

    • SSDEEP

      768:9aVg5P5X/bWWDAYsAYaWBjZViqCp09VCBJiffi/30NZXggoX:9a+1KG3s3aCjZViHp0zgJifK3CZwFX

    Score
    7/10
    collection

    • Uses the VBS compiler for execution

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks