General
-
Target
341dab4037e9eff3fa0f34fb8382f30c.bin
-
Size
460KB
-
Sample
240313-bmcfvagd2v
-
MD5
3baf028b4e099bcf5bbca47c7e8c94cd
-
SHA1
823e426ff2febb5cd365cad014bbee6c4d1c3fd4
-
SHA256
ca8a7d9d1cec584d9c5ea4a02a19270929ec2fdb8819a21d94f7b6adcb870092
-
SHA512
da93b826ff7f281993ec89122f6c27e55a6914a5dc03628d18465709757daef7f8c2530a5fffd01e53bd45ff8a0de9c385eaca2e925bab1822f43d34e4a01768
-
SSDEEP
12288:HDiZAxMJdJua/y1kEH6dqK/p75978xolKw:HD5ej/a0qm7fBlKw
Static task
static1
Behavioral task
behavioral1
Sample
665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea.exe
-
Size
551KB
-
MD5
341dab4037e9eff3fa0f34fb8382f30c
-
SHA1
9833559bcda07e6976364672f6b7c8bcef84571f
-
SHA256
665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea
-
SHA512
bd0d81ddde528f9987f749f9789d6a32300c7eef5d98593c4fc708d0352d0c8828982482894bd8ac9e768e320f4ba5fede2ecd8937a461dadad4015be2940f3d
-
SSDEEP
6144:ImOP0pJkkuNjE241F13gyLWoz6XVasKvGSz7tvIPykUn5CRFaPyCoUtU7Hi8R55i:pkNE2cL3rKou+vGEZvx5CD1W4i83bWL
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
9625d5b1754bc4ff29281d415d27a0fd
-
SHA1
80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
-
SHA256
c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
-
SHA512
dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
-
SSDEEP
192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
Score3/10 -