General
-
Target
OutlookRecoveryToolboxSetup.exe
-
Size
26.9MB
-
Sample
230331-vy1scsdc9s
-
MD5
12949caed988c98c2d0b5e58166ea070
-
SHA1
530ac96d72501fbe042aad76d3767fc4e8c954d1
-
SHA256
6efb63099fe74064ff14f17c890ef85878b9dc64a1d2eaf79f3c7761c71af139
-
SHA512
90ab9a2077be2869a9c24bc2f21fab40fe56042fdcef8257ab88a774397558c42b640da6cb7b85cdc2c1bb7ea0f810fd94460ac38678123c84573b099b5f4b0d
-
SSDEEP
786432:kKEW/UAnkHowKv4HmGC+jbWBHxXw/NtZ30BpAw7Y0:fVUAnkFI4fCmbWBRod3Gr7Z
Static task
static1
Behavioral task
behavioral1
Sample
OutlookRecoveryToolboxSetup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
OutlookRecoveryToolboxSetup.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
OutlookRecoveryToolboxSetup.exe
-
Size
26.9MB
-
MD5
12949caed988c98c2d0b5e58166ea070
-
SHA1
530ac96d72501fbe042aad76d3767fc4e8c954d1
-
SHA256
6efb63099fe74064ff14f17c890ef85878b9dc64a1d2eaf79f3c7761c71af139
-
SHA512
90ab9a2077be2869a9c24bc2f21fab40fe56042fdcef8257ab88a774397558c42b640da6cb7b85cdc2c1bb7ea0f810fd94460ac38678123c84573b099b5f4b0d
-
SSDEEP
786432:kKEW/UAnkHowKv4HmGC+jbWBHxXw/NtZ30BpAw7Y0:fVUAnkFI4fCmbWBRod3Gr7Z
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-