Overview

overview

6

Static

static

5

GP-041017.exe

windows7-x64

6

GP-041017.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    05e042baf50ff94bd78b5793c15c8abdf431010b7fd35dcc30ef6fbf28997cfc
  • Size 463KB
  • Sample241114-b9q8hsshkn
  • SHA256 05e042baf50ff94bd78b5793c15c8abdf431010b7fd35dcc30ef6fbf28997cfc
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
collectiondiscovery

Malware Config

Targets

    • Target
      GP-041017.exe
    • Size 960KB
    • SHA256 66097a01806d3e72cdfa6c6b4a070e427d6f0580c63b186889ad78e057f4b050
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    collectiondiscovery

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks