General
-
Target
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
-
Size
1.1MB
-
Sample
241201-dga2yavkfy
-
MD5
4992863093cb396628acfb86b56af1e6
-
SHA1
4f61861be36c992e420dd387997322130ba2164d
-
SHA256
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56
-
SHA512
d6dd52bdd607837ba685ee672410db23d3cc0a1de2a01ef5ad46e55401e205ac14795591fb03e3deb330a93c1a587d6e4d5a065a42d7b2da5ad069ae60cae8fc
-
SSDEEP
24576:kMcsnSHziAtR/JTSje9XB0Jh0lhSMXl5jRxIKy9a:kM/nSHN7/Aj0XB0QpjfIKy9a
Behavioral task
behavioral1
Sample
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
-
Size
1.1MB
-
MD5
4992863093cb396628acfb86b56af1e6
-
SHA1
4f61861be36c992e420dd387997322130ba2164d
-
SHA256
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56
-
SHA512
d6dd52bdd607837ba685ee672410db23d3cc0a1de2a01ef5ad46e55401e205ac14795591fb03e3deb330a93c1a587d6e4d5a065a42d7b2da5ad069ae60cae8fc
-
SSDEEP
24576:kMcsnSHziAtR/JTSje9XB0Jh0lhSMXl5jRxIKy9a:kM/nSHN7/Aj0XB0QpjfIKy9a
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1