General
-
Target
e8f1b187cef74b0f329f5ec21e70ae94fe815a6d5c60b497561f61ef4ea29a0b
-
Size
500KB
-
Sample
230607-fb4s6sgh38
-
MD5
a643aa1dd8357db887c044529add61e6
-
SHA1
296eac74b1a7d80666770f5b96640b2e2114705b
-
SHA256
e8f1b187cef74b0f329f5ec21e70ae94fe815a6d5c60b497561f61ef4ea29a0b
-
SHA512
db7afcf60f5144a9c30587af2f032e3976d60d0cce29a050f7138407331a1b77dd31631c5541f302bfebcd9f4e5f67236c8bb03df4844290897d0b212f572e41
-
SSDEEP
12288:aYqncXvK04BdjQWSBgYMKjwoGlQL/wyGhp:JDXh8QvBg36K
Static task
static1
Behavioral task
behavioral1
Sample
e8f1b187cef74b0f329f5ec21e70ae94fe815a6d5c60b497561f61ef4ea29a0b.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
e8f1b187cef74b0f329f5ec21e70ae94fe815a6d5c60b497561f61ef4ea29a0b
-
Size
500KB
-
MD5
a643aa1dd8357db887c044529add61e6
-
SHA1
296eac74b1a7d80666770f5b96640b2e2114705b
-
SHA256
e8f1b187cef74b0f329f5ec21e70ae94fe815a6d5c60b497561f61ef4ea29a0b
-
SHA512
db7afcf60f5144a9c30587af2f032e3976d60d0cce29a050f7138407331a1b77dd31631c5541f302bfebcd9f4e5f67236c8bb03df4844290897d0b212f572e41
-
SSDEEP
12288:aYqncXvK04BdjQWSBgYMKjwoGlQL/wyGhp:JDXh8QvBg36K
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Accesses Microsoft Outlook profiles
-