General
-
Target
b00bd190f37328c060a0446e6414de72.exe
-
Size
119KB
-
Sample
240403-hpe33sac4z
-
MD5
b00bd190f37328c060a0446e6414de72
-
SHA1
77c019f6d4beba4fd716dca07c83ca328c3a9946
-
SHA256
cc9e5bfeb86b7fe80b33a4004eb0912820f09dec29a426a8a4136f7306c08d04
-
SHA512
ed0872416306e848813df3408ee0d8a0c118dda262052baeb92f38a9a5fd695824debe790a35916a6b1008157cbc45ff77ea1795fb8a82d8448f0d91141abd8c
-
SSDEEP
1536:FWJh7/8e1tw7/BLb8T1Bo0YDF9mAARU3dRL2O9bRo7rKRuAsL0z+hXunzbpImKW9:0ke18JLQT1SZLz9bRo3KTRKhKJKWkk
Static task
static1
Behavioral task
behavioral1
Sample
b00bd190f37328c060a0446e6414de72.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
b00bd190f37328c060a0446e6414de72.exe
-
Size
119KB
-
MD5
b00bd190f37328c060a0446e6414de72
-
SHA1
77c019f6d4beba4fd716dca07c83ca328c3a9946
-
SHA256
cc9e5bfeb86b7fe80b33a4004eb0912820f09dec29a426a8a4136f7306c08d04
-
SHA512
ed0872416306e848813df3408ee0d8a0c118dda262052baeb92f38a9a5fd695824debe790a35916a6b1008157cbc45ff77ea1795fb8a82d8448f0d91141abd8c
-
SSDEEP
1536:FWJh7/8e1tw7/BLb8T1Bo0YDF9mAARU3dRL2O9bRo7rKRuAsL0z+hXunzbpImKW9:0ke18JLQT1SZLz9bRo3KTRKhKJKWkk
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-