General
- Target New Order Inquiry.exe
- Size 941KB
- Sample250319-c63mtavnv3
- SHA256 c304972e9e68f67318eb2a082bfe958d5e77fdd8a7b2b38867938803ab6d87f6
- MD5 f5617e4332d9b19f561563dc833fbecf
- SHA1 3a25e8dcfdaa148b5529c23622f881325405370f
- SHA512 d29532ec2a59384c288875677d771fc746feb4bd812fa96c8cbc087320eb14d9859c97aa7f475a583075f3fa9322a4f08cf3c2fae934e83da29aef2c7556140c
- SSDEEP 24576:Nu6J33O0c+JY5UZ+XC0kGso6FajrjnJ1WY:/u0c++OCvkGs9FajrCY
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
New Order Inquiry.exe
Resource
win7-20240903-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Order Inquiry.exe
Resource
win10v2004-20250314-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target New Order Inquiry.exe
- Size 941KB
- SHA256 c304972e9e68f67318eb2a082bfe958d5e77fdd8a7b2b38867938803ab6d87f6
- MD5 f5617e4332d9b19f561563dc833fbecf
- SHA1 3a25e8dcfdaa148b5529c23622f881325405370f
- SHA512 d29532ec2a59384c288875677d771fc746feb4bd812fa96c8cbc087320eb14d9859c97aa7f475a583075f3fa9322a4f08cf3c2fae934e83da29aef2c7556140c
- SSDEEP 24576:Nu6J33O0c+JY5UZ+XC0kGso6FajrjnJ1WY:/u0c++OCvkGs9FajrCY
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext