General
-
Target
314ccd7e4c0f2e28eaa80fbc8aa7e449fb89b19919ab1237c11abc426d93adb1
-
Size
482KB
-
Sample
230603-nqjesaha3x
-
MD5
ec1688a0f4429f15f798555e5df8ef79
-
SHA1
8c738157c986af48df425bdbfb6a96a7cf266faf
-
SHA256
314ccd7e4c0f2e28eaa80fbc8aa7e449fb89b19919ab1237c11abc426d93adb1
-
SHA512
f6e01145356286f10e88f92c116256c0782d57d75c2c16e02061be260412ef90ce46316e2ce3e086f11cb9899ad68ee4a4a0f3cea55b086c6bf81c975648df36
-
SSDEEP
6144:5kUjXgjD4vCaQ3bTL+9hzrZPkRemaPleyMzYbD2WoUXKnnnXbtiqe7:5ZjXADEXsv6xfPl6zYbD2WoGKnXbti
Static task
static1
Behavioral task
behavioral1
Sample
314ccd7e4c0f2e28eaa80fbc8aa7e449fb89b19919ab1237c11abc426d93adb1.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
314ccd7e4c0f2e28eaa80fbc8aa7e449fb89b19919ab1237c11abc426d93adb1
-
Size
482KB
-
MD5
ec1688a0f4429f15f798555e5df8ef79
-
SHA1
8c738157c986af48df425bdbfb6a96a7cf266faf
-
SHA256
314ccd7e4c0f2e28eaa80fbc8aa7e449fb89b19919ab1237c11abc426d93adb1
-
SHA512
f6e01145356286f10e88f92c116256c0782d57d75c2c16e02061be260412ef90ce46316e2ce3e086f11cb9899ad68ee4a4a0f3cea55b086c6bf81c975648df36
-
SSDEEP
6144:5kUjXgjD4vCaQ3bTL+9hzrZPkRemaPleyMzYbD2WoUXKnnnXbtiqe7:5ZjXADEXsv6xfPl6zYbD2WoGKnXbti
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Accesses Microsoft Outlook profiles
-