Analysis
-
max time kernel
143s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
04-07-2023 07:00
Static task
static1
Behavioral task
behavioral1
Sample
Carter.Hale.pst
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
Carter.Hale.pst
Resource
win10-20230703-en
Behavioral task
behavioral3
Sample
Carter.Hale.pst
Resource
win10v2004-20230703-en
Behavioral task
behavioral4
Sample
Carter.Hale.pst
Resource
macos-20220504-en
General
-
Target
Carter.Hale.pst
-
Size
2.2MB
-
MD5
b1228eb2c06475db5a94b831fc457d59
-
SHA1
55780712be0cf8561bae22385f9365e65dc92f19
-
SHA256
1f458d5fa699a98f11fb0d6d0f40b79886433ac7c8bcba44855fa5bd9db5c682
-
SHA512
959c0fb58842245b92da08d843747a25af86174efe34f5bfbafa611a19f8698cff912d13156a49998417db6c67a67d6441323ab381a1dee198366aef94453a43
-
SSDEEP
6144:7gOu+uFWOHmB237llbKxxxbxxNxjxxxCxxxxxxbkx8x7xxxxxxxbZxsxMCxxxxxS:HhA0bjU1aFKcoysEdgbtQScFS1TJ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-264077997-199365141-898621884-1000\Software\Microsoft\Internet Explorer\Main mshta.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2172 OUTLOOK.EXE
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE" /pst "C:\Users\Admin\AppData\Local\Temp\Carter.Hale.pst"1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:2172
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\RegisterCompare.hta"1⤵
- Modifies Internet Explorer settings
PID:2756