General

  • Target

    f2f5be8e4532ede3757fb84dc3a8344bc89b07fc4b5226005e6aa31977c0bd7c

  • Size

    1.1MB

  • Sample

    241114-mlq4ds1qbk

  • MD5

    6548f405287cd52dd888b80ca184c806

  • SHA1

    42dd63231359603b68c8f73613947cd53ee64611

  • SHA256

    f2f5be8e4532ede3757fb84dc3a8344bc89b07fc4b5226005e6aa31977c0bd7c

  • SHA512

    df246b0aab309aa16418a0517a5562a6fbd409b982042eca04d99348f5c3516f350aa60a1ce295045b1fb8640d0bd4cb6b95cfae81a12a9d8624247586bfada6

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLyZcxjiHjxE1uBTkg1BnhZKoX4+WX61:ffmMv6Ckr7Mny5QLyZGDKlVLKoX4c

Score
6/10

Malware Config

Targets

    • Target

      f2f5be8e4532ede3757fb84dc3a8344bc89b07fc4b5226005e6aa31977c0bd7c

    • Size

      1.1MB

    • MD5

      6548f405287cd52dd888b80ca184c806

    • SHA1

      42dd63231359603b68c8f73613947cd53ee64611

    • SHA256

      f2f5be8e4532ede3757fb84dc3a8344bc89b07fc4b5226005e6aa31977c0bd7c

    • SHA512

      df246b0aab309aa16418a0517a5562a6fbd409b982042eca04d99348f5c3516f350aa60a1ce295045b1fb8640d0bd4cb6b95cfae81a12a9d8624247586bfada6

    • SSDEEP

      12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLyZcxjiHjxE1uBTkg1BnhZKoX4+WX61:ffmMv6Ckr7Mny5QLyZGDKlVLKoX4c

    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks