General

  • Target
    New Order Inquiry.exe
  • Size 941KB
  • Sample250319-c63mtavnv3
  • SHA256 c304972e9e68f67318eb2a082bfe958d5e77fdd8a7b2b38867938803ab6d87f6
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Targets

    • Target
      New Order Inquiry.exe
    • Size 941KB
    • SHA256 c304972e9e68f67318eb2a082bfe958d5e77fdd8a7b2b38867938803ab6d87f6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks