General

  • Target

    e5c80844.exe

  • Size

    2.6MB

  • Sample

    240130-lwpgwaehfp

  • MD5

    b69036a695b48549380a64c8df3a00f1

  • SHA1

    1f70d2f6e9b3172291fba309d60adea856af6be0

  • SHA256

    e5c80844063be3cea01fa549f22c23723909ce5e596e2f9001b8c37099657210

  • SHA512

    4d5c763842c556eca464cb6aceb3cb6b68ed16794f159c06f28873f32580ee977cef9e9697b92b2f3b1c1d72592f03460b53964ff5d2593a05b7f6a7aafd9cf3

  • SSDEEP

    49152:9xVm0KsjOgkwuEfD9GqLToTy1No2IiXwKYIBEe6k:J1S0TooVXXxqBk

Score
6/10

Malware Config

Targets

    • Target

      e5c80844.exe

    • Size

      2.6MB

    • MD5

      b69036a695b48549380a64c8df3a00f1

    • SHA1

      1f70d2f6e9b3172291fba309d60adea856af6be0

    • SHA256

      e5c80844063be3cea01fa549f22c23723909ce5e596e2f9001b8c37099657210

    • SHA512

      4d5c763842c556eca464cb6aceb3cb6b68ed16794f159c06f28873f32580ee977cef9e9697b92b2f3b1c1d72592f03460b53964ff5d2593a05b7f6a7aafd9cf3

    • SSDEEP

      49152:9xVm0KsjOgkwuEfD9GqLToTy1No2IiXwKYIBEe6k:J1S0TooVXXxqBk

    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks