General

  • Target

    2d9c953de9ccce4520ae35aa05df2c6975bc2285de41fe720f9c77802b53e83c

  • Size

    457KB

  • Sample

    230602-qdxsrabh3z

  • MD5

    1c16ac87c0c93f97d43adaab501370bf

  • SHA1

    e3c135d2cdb672a83e6d538f7503ca0a08f27756

  • SHA256

    2d9c953de9ccce4520ae35aa05df2c6975bc2285de41fe720f9c77802b53e83c

  • SHA512

    8138ffeee78f1887b13d8b183b56e1126dcbc45965c6e5976aa078bdf22deffb350fb609d8fda6af19e39335000c873e24d22dad7f3e235667f01f0e416526b4

  • SSDEEP

    12288:hP6U725N/6z2yrsNvt5oY3fvB5HipNekdyH:hP6UOx6zpO1WY3DCpNe

Score
10/10

Malware Config

Targets

    • Target

      2d9c953de9ccce4520ae35aa05df2c6975bc2285de41fe720f9c77802b53e83c

    • Size

      457KB

    • MD5

      1c16ac87c0c93f97d43adaab501370bf

    • SHA1

      e3c135d2cdb672a83e6d538f7503ca0a08f27756

    • SHA256

      2d9c953de9ccce4520ae35aa05df2c6975bc2285de41fe720f9c77802b53e83c

    • SHA512

      8138ffeee78f1887b13d8b183b56e1126dcbc45965c6e5976aa078bdf22deffb350fb609d8fda6af19e39335000c873e24d22dad7f3e235667f01f0e416526b4

    • SSDEEP

      12288:hP6U725N/6z2yrsNvt5oY3fvB5HipNekdyH:hP6UOx6zpO1WY3DCpNe

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks