General

  • Target

    PURCHASE ORDER.zip

  • Size

    8KB

  • Sample

    230201-mzg3mseg8s

  • MD5

    06ef3e0eab21a98fca55056fe73bbfd0

  • SHA1

    b65bb3b6bd57659e0ce605e17d61248687250b10

  • SHA256

    cb0cc00127f40549832f423400571af4b1ab3500d5336e4da6bae019bcbceab2

  • SHA512

    a5bf8c35f9c25cac2d8f037f0a2911c9ce9f3c8b81099afa6b9c8b1c9ff183c7dbbb5316ffca98e8305a2d407b09785b2bd41c1de879a67a1a135973716b22fb

  • SSDEEP

    192:UC+q83lAfxDcrdoNEOg3d9kWGueg+FzOWw79cFHk0MQQI:w+VKAWGueg+ORGjMg

Score
6/10

Malware Config

Targets

    • Target

      PURCHASE ORDER.exe

    • Size

      18KB

    • MD5

      f58167d0e2b3692dbac5b35b8907e414

    • SHA1

      5cfaae6b595f0140ea0afa0f4e76ee23474edaae

    • SHA256

      4cba59fde5a74d8e86638c65299b51adacc0ce2af56c1f17cb27c13bf5bb2263

    • SHA512

      e5784c68b0145666b46117deb7276aa20c142306715180501ff9c91a574f7b4f3a2957924111728304a761f317cf63667bbcfa6cb4517cd445ed15736a91766d

    • SSDEEP

      384:X2YZbVxZ4gddXpj3fIQS3l1Hok0NGHISSNZfTQL3:meowdN3sMpGKc7

    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks