General
- Target file.exe
- Size 942KB
- Sample250313-ss3zeswtas
- SHA256 ada32ec7d1868b4e082ae007138811e58e8b44dc748a847d8e055adf4cae25a9
- MD5 855bb87420f8dbe945a1ffa4abbb23f9
- SHA1 8115793b368fc257780e8ae00bc3ad568adfbd60
- SHA512 d447411eb3b4b6f7de1e723d9fb7b7da6859f3f1f53316cc9c5eb714d62764058a3e40688f1fc773636e37e53905093c2f60bb68bd2d0d9f85999116c3b4f24a
- SSDEEP 24576:lu6J33O0c+JY5UZ+XC0kGso6Fa5S4L2BKEPMqWY:nu0c++OCvkGs9Fa5TyBZsY
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240903-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20250217-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 942KB
- SHA256 ada32ec7d1868b4e082ae007138811e58e8b44dc748a847d8e055adf4cae25a9
- MD5 855bb87420f8dbe945a1ffa4abbb23f9
- SHA1 8115793b368fc257780e8ae00bc3ad568adfbd60
- SHA512 d447411eb3b4b6f7de1e723d9fb7b7da6859f3f1f53316cc9c5eb714d62764058a3e40688f1fc773636e37e53905093c2f60bb68bd2d0d9f85999116c3b4f24a
- SSDEEP 24576:lu6J33O0c+JY5UZ+XC0kGso6Fa5S4L2BKEPMqWY:nu0c++OCvkGs9Fa5TyBZsY
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext