Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 10:45
Static task
static1
Behavioral task
behavioral1
Sample
Share Your Breakthroughs with Our Community.eml
Resource
win11-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Share Your Breakthroughs with Our Community.eml
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
email-html-2.html
Resource
win11-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
email-html-2.html
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Share Your Breakthroughs with Our Community.eml
- Size 46KB
- Sample260730-mth3rawbrf
- SHA256 cc024f5db6eed44828ed5a42771eb94c847bf6828994c4e364785edcde43ecb5
- MD5 11e4d3c9aaf0ec159746041b947bedd0
- SHA1 d07b67ce14e45dee83dd7d81e5e9b8a7e39f039a
- SHA512 ec40f0763866f781f4e7de1c4932b398aef044f92bf9a0af9d5cc0b183181535af69e1fef2789fd4eeaf6ed97dcfeaddbfc468084bfc7971c8344c3007e8830a
- SSDEEP 768:157LqahUd9YGeDYxG0hSWjd/NbdOpJOZ3//Gx39oBOMZRSdllNw+9VYFA:1FDg9b9SQbnQGBOSRSdllND96A
- TLSH T13A23D751DED2989F4433C1B2F052BCDDA1519B0F9BA30AE4EC277126DD0CD62096ABDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 OUTLOOK.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OUTLOOK.EXE Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OUTLOOK.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OUTLOOK.EXE - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OUTLOOK.EXE Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OUTLOOK.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OUTLOOK.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001" OUTLOOK.EXE - Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3360 OUTLOOK.EXE - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3360 OUTLOOK.EXE - Suspicious use of SetWindowsHookEx 30 IoCs
pid Process 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE 3360 OUTLOOK.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\Share Your Breakthroughs with Our Community.eml"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3360