General
-
Target
Outlook.lnk.bin
-
Size
2KB
-
Sample
230904-rhch2sha58
-
MD5
f274648730a6b233abe71da363e10d9a
-
SHA1
2071ec37e2f77994de4549ecb481104881ab0d6a
-
SHA256
76057a9c0a13cee9d91d81699ef404f5356fd6c05dd016d233e4bdf81dc557db
-
SHA512
9d26fd4bbdafa0c2864534f433adf5f13c43a064120f90704d437dca5c2b63a6d6ec09fbc872f17351e8c7babfcb7fc4a174e2e8dfca1949647eea04af0e22fa
Static task
static1
Behavioral task
behavioral1
Sample
Outlook.lnk
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Outlook.lnk
Resource
win10v2004-20230831-en
Malware Config
Extracted
https://drive.sharedin.store/share/t1.hta
Targets
-
-
Target
Outlook.lnk.bin
-
Size
2KB
-
MD5
f274648730a6b233abe71da363e10d9a
-
SHA1
2071ec37e2f77994de4549ecb481104881ab0d6a
-
SHA256
76057a9c0a13cee9d91d81699ef404f5356fd6c05dd016d233e4bdf81dc557db
-
SHA512
9d26fd4bbdafa0c2864534f433adf5f13c43a064120f90704d437dca5c2b63a6d6ec09fbc872f17351e8c7babfcb7fc4a174e2e8dfca1949647eea04af0e22fa
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-