5bf7ae271645d36452c300d4eafe5f5c22a955915949857e468f424b003c24f8

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.OutlookForWindows_x64.msix
Size 32.2MB
Sample260804-gx2flssfkf
SHA256 5bf7ae271645d36452c300d4eafe5f5c22a955915949857e468f424b003c24f8
MD5 fa8fc85d2717f219689c090971c6d1bc
SHA1 ec016c00d63165f933a1791b85b07f5564a36cf2
SHA512 d4ddcdc97fb6f6ab7678a5bca44684e412d49c1f841f70258d7ed0b0db3ca646396744667cfb988957272165d1abcee09ee53cf352fdc96d8a1eec3a2b290e3b
SSDEEP 786432:hHbVNWZfVyYSMHw9PHcCXUmIZYU48/B+K2/xWur:tV3DMHmECXUm84q+K25Ww
TLSH
T1AB773368BB1AFE9FD81E50364D8405C1F0186F658152FE6BD89459BC06DCA8C03A7EBF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  Microsoft.OutlookForWindows_x64.msix
- Size 32.2MB
- SHA256 5bf7ae271645d36452c300d4eafe5f5c22a955915949857e468f424b003c24f8
- MD5 fa8fc85d2717f219689c090971c6d1bc
- SHA1 ec016c00d63165f933a1791b85b07f5564a36cf2
- SHA512 d4ddcdc97fb6f6ab7678a5bca44684e412d49c1f841f70258d7ed0b0db3ca646396744667cfb988957272165d1abcee09ee53cf352fdc96d8a1eec3a2b290e3b
- SSDEEP 786432:hHbVNWZfVyYSMHw9PHcCXUmIZYU48/B+K2/xWur:tV3DMHmECXUm84q+K25Ww
- TLSH
  T1AB773368BB1AFE9FD81E50364D8405C1F0186F658152FE6BD89459BC06DCA8C03A7EBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  CDS.dll
- Size 956KB
- SHA256 199d61b791a68bfebd25f1b79c10e9762e1160a324adb615442f865bcec5d5ed
- MD5 e199f28d03e5daff024a551a3f8cd9c5
- SHA1 b60b396a3a304f507462f9920ae295b07224fd81
- SHA512 6721850f61fa031ac828e34834125433f54fdaab44b0f3e77cc6c8c35307ff9443b886a97df5469bc3cd0ee27a484690fd018641eadc697b3216eebf9dfd6c46
- SSDEEP 12288:pWapwJEgDGPe9ANtQHWQVnAgn8wohX1r6uVvdoVMEpMo:QapwJEgDGW9ANtQHWQlAww1rRvdxEeo
- TLSH
  T1DB254D82E65801D9D0AAD2BD8D97C817FB717C420721D7DB02A0D7BF5FA77E0A97A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CoreMessagingXP.dll
- Size 1.0MB
- SHA256 0a4325b03d1f2886ffed632301c63233da87f0b04eab395abea0d245dbc07091
- MD5 c0e294585679e912f122963213f9df20
- SHA1 bdaea7cf4c3c838efa4037b3fea07d1e97ef95e8
- SHA512 dce5124994ae42222a87cf48b291e1127714de40d876e59ff4c5b0ba769feb5df4cd658429bfa21ee05b1abb086b04e1487f42538452a2dd1ad802ba531102f3
- SSDEEP 12288:XjHW0InsRG5R9PWIFxSoKMndJObAHr6oHfpskWwHCjbV6cNF7TUaQy:DvIioR9vFxdAbAOcpVWKc7Uaf
- TLSH
  T1C6252C6F6FA84097D17AC27E85BB8A8AF2F1B8531B3187CB0451426D3F27BE45979310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Dino.dll
- Size 576KB
- SHA256 0130565587ce7d00712d46c82fb04400e2607ccfc461638579257058f4662a68
- MD5 686c22c603f80c829a11399c3ff6a0c5
- SHA1 59eabf73825e43d8e5cc0caa7a9285df35bae4f6
- SHA512 6e6caaa53636d7f3f7c600cb9a501ab2d9d97206d706483e4da78db7a3053135c6f2badf2c806cfe4640265bfdc66c95649db962dc89d95259e1e29d171e7422
- SSDEEP 12288:Gp9vtbgKaM37Uwph0lhSMXl+SzyicHjalJ3:AZtbgjo7UGh0lhSMXl9zyicHjal
- TLSH
  T160C47D41F3A492A9D467923488874A45FF3274868740DBCB3691E67E6F373D29FBB240
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  DwmSceneI.dll
- Size 2.3MB
- SHA256 291c35dc2befe14db74b1d7defa66128dcae708e68ee31f1eb020a6f636e2432
- MD5 bd671050875814237bd8c78c1d5a190c
- SHA1 ecacc3bda4a683996cb71abdb219cd092390d14c
- SHA512 844de0d700d9809f63bb9c006902cb9a172e24a17477accb1de51d6c3456db29b2bf3994654db536a20b84a750f68613d9ea527e3dbe623b028adc887e775070
- SSDEEP 49152:m0UNAoav8KwhF6oZAtBeO7g4rA5I0r/eO:3vFHA5I0yO
- TLSH
  T1C2B5290B679841B6C5AED3B6C8D78B26F33270100BF647D30798211E1DBBBD45E7A662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  MRM.dll
- Size 307KB
- SHA256 626be8b0e24349112705e778232ed3957b6195553d7ab8dc4a31e795201998f4
- MD5 c7643e23e6dc970dab666254396ecf41
- SHA1 b30cee0d4d6af9f570c40c7466bfb296757d124c
- SHA512 e8609108a38b433c669da82c6868a8ee51b9efa3580f7064c763889cb013f2c8001bbad8feb69a9e6d74e792f5d9421dbfade47e3bd0e324c721119cb6d8ae5f
- SSDEEP 6144:fAjs6JpebJ9hqX7jW2Heu2BRBwFi03mQbUVbYG7Q/iGle+xbG:fL6DebJKXfT+u2BROSRTKiFF
- TLSH
  T1FD645B6B639814E6E17AA23CC5974A4AF7F2740113619BCB07B1414E3F1BBE89E3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.DirectManipulation.dll
- Size 651KB
- SHA256 2ef353495ff069c27f7cc423a54c8fc302a9e22564579cd1379abf650af128c7
- MD5 6edb516836e68adc1927df4cfcf2d1c8
- SHA1 15c6f504cf850df02cb8dbca62a8d8a817a6fe8a
- SHA512 e912f4b3afbe4a00592eda741f1ad8be9cb5a4bf992b3d4e8fe95af64428b25e0dfbba17bdce77cb99068b1b5dbeebe10266838d231d1e76a38680a11fe38424
- SSDEEP 12288:NLBY+vBO90m2YbRMYOKAroVn56Ml4UEOK7xV8YDRgC3lQcqZZv:3vBO90m28F64n56Ml4UEBxVT3lQJnv
- TLSH
  T140E48D2E5BE440E1D276917C96678A1AFAB174111B2596CB03A1813C5F3BFE09F3EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Microsoft.Exchange.Clients.SmimeAX.dll
- Size 199KB
- SHA256 63292e06e10320a78e545d77e3ebcd23e702e65ebf672d5eac1be9fa3e787bcf
- MD5 79848b3f84d98956ca85d2a3bcf6ec77
- SHA1 d84ccde9b71d360dad0ceb20e4f79843a40b6d24
- SHA512 9f8f5f3243e0878bab81e0220221f85b0eb2dacb588c9bfdbb183290c54ea3c062db633eee93ac7c302f89ef435d1156ec47a195f13794b93afacd56c5ccb730
- SSDEEP 3072:AkGNs4cLsra/pIAGErxEKLB+Non13ePovylC:2s4cLsram18xrerlC
- TLSH
  T1AA145B5063FC8B1AF5FF2F78A07464250AB6F617A822EB0D0D41A5DD1963F81C961B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  Microsoft.Foundation.winmd
- Size 11KB
- SHA256 df40d886565dcd4e1e839deadb3bd90f728cad0de826ee3fe88e0ae36d3f8b66
- MD5 9dd81c5d529b79decb8bf62910c2fcdc
- SHA1 0ec007ccfddfb4cf89f18ad7649a378a502a6bff
- SHA512 30e1019d66266830649a83966452e774e7687ee1698614282551419a501ffd5b76f4fd5ceb5f3ccee203ef10701240cc5cbb9a9b49955084e775737bcdad38cb
- SSDEEP 192:VEsWO+qGTDWDI68n2JBWseawWtBs+lKX01k9z3AhIUnd:Vz+qG4lNnBdlKR9zeIod
- TLSH
  T137322AC38A2CA047DD9BACB04398EE833C7DD7C71900652359D5F9681D937C5AB2492C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  Microsoft.Graphics.Display.dll
- Size 231KB
- SHA256 c9dcc9d9fd7f027524b844d401b58baa1711eabc5521366b586152b7c452ec37
- MD5 5c0fe4bbf01d79f2e7da56617128cc04
- SHA1 2ff33658c1616a21b7cb48858db50f037d0df589
- SHA512 37222e84c07bcfba5397d98113b0474b9e67db70ce8ba8cae3dae5352b3546251b37a254c4359ecc9929d05ce1810c8e1bed5334daaed84da8665b53e4d0d252
- SSDEEP 3072:AuPlJYBMDU9kKOv+HPQiJzf2u8CUaVXqlL9Z1FiQwUukyLyNaS2+9oFrkvD:A8lqgNTv8PGIVKLz1erOf2+9t
- TLSH
  T18E343B6E7AA840A5D177A03CC5D28A0AF6B2B061173157DF03A1C37D0E27BE9BD39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Microsoft.Graphics.Imaging.dll
- Size 137KB
- SHA256 095f5000adefca6cdd8cafd2df409a3a9401930713308c0f3a74c56c7f5a150a
- MD5 812e71e782fb8a0900a3d758189ca3ea
- SHA1 06ce1c90c8fe75f44d555b49d2f636a9fc2cdb39
- SHA512 1829fecef406c94061b7964d3435ba75741865f8463a377ad0c08e5970e075787ab0f0c13b608211a11a636c97313b65864c21523b7b060e38e54d2b3d9696a1
- SSDEEP 1536:eKKW9Bta7zmrnYNnbmGRlYceerkq70qJ6C36TKE9MLlWpFXLs+LJoR03Jh0zs1zC:ZQzmDY3lYcrl0a6C3oKE9ML4EI70w1u
- TLSH
  T15FD36B56B57951ABD12A8478C9439902FF71B8924B50A7CF67608DDA0F23BE0AF3E341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Microsoft.Graphics.Imaging.winmd
- Size 13KB
- SHA256 ed25fda12e6a2d65301d8102b723dbdb6ed2b0f7893bba8c39d0fbbf441d2a0c
- MD5 1d492180e73a8d5bb77d50510c0be23e
- SHA1 efb1e8598e5cdf4f0174cb5b81a81007465392e4
- SHA512 69bc5f2e2af5e7033639bc466b62c513e11cb71c406f4ace47265a9928c4d7c998e7682ceb91097ab2f185f848a0a183b262c7d1080dbdf60937d8c80ec806b6
- SSDEEP 192:ORuaeAFRpZEl+OR8oeWDI68n2JBWseawWhR3JKX01k9z3AbPiiS6bue:O0O/El+OR8klNCR9zgpbl
- TLSH
  T16A522B839A28D953DD9F3870AAE9DE833E39C7D30A01969B1694F4442C477D4EF3522C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Microsoft.Graphics.ImagingInternal.ImageObjectRemover.winmd
- Size 11KB
- SHA256 5a896ea26d5812a3661d969ad5e94f0ea928dd746c8faa0c4273f2909d4fe34c
- MD5 b27f68f51136b86bdfcac83aebbe14cd
- SHA1 966ab920ea4147075e174da307a67be916734e0d
- SHA512 52cf682d6de1115f2706a166cba016f173fd76fddf6c01286dbd3c8873a972613ee209caf35fec281d7fb7034a8f49669612a08179b99b68d5589aae73ac2c96
- SSDEEP 192:bvcz3/OR0PzNWDI68n2JBWsea4Wfjik2K13X01k9z3A/jNCOoPJ:bv2OR0bKlNP2QR9zSjHm
- TLSH
  T12C4239C3CA2C9083DDAF78B046E8ED873D39ABC78D40655666E9F5841D533C4EB2862D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Microsoft.Graphics.ImagingInternal.winmd
- Size 15KB
- SHA256 62ac6dce0670a95e2ff04953a078cb381c6a1eb15f56724112791964e29ce021
- MD5 6c74ac07127544436aab068c8ce04cbc
- SHA1 5e3b412831f3ea06d70792ea09749de688d86fc7
- SHA512 1da3c7a137a2cbfa51864f95c5db471862b5437719072dd5b2fe25a66f04a1c33131d986c7de1a2cfa9f99f39dadf541b9f457f4d0d81beb8b86284984ee58be
- SSDEEP 192:u37nxcxNTgCgBdUORVJqEZJs+N8z3fjjk5wq8IUiVZWUwuIi9ycBWsea8Wlwcz5a:utcLjORVJqEY+N8z309gclNtR9z7w
- TLSH
  T1F0723B93E62CD042DD9BF97295B8CE573D38A7D390C18B062288F59D1CD37C8AB61318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Microsoft.Graphics.Internal.Imaging.winmd
- Size 16KB
- SHA256 116bfd1c811586ab0c907cca6fb72c4c4119c71e60d27e4426e5c9fd5327eb94
- MD5 596b5861ba207db9f6a831a38f3a2048
- SHA1 de95e79a95172e9415b15782af8c1c6595dd516d
- SHA512 3440759648b5ed9736f5bfeffd4f9ff730d646e9bc733241a5d0b7b7fdbcb7cfc7e48b61ca7b597704c146cf6ff00d14128d554d27f4a385d0a5ccbf3ab2278e
- SSDEEP 384:UP4zPkRa/OR5Jhm3EK8GG+HJNbzlNUW9R9z2Fg:c4zIaODkHJ9/9z2W
- TLSH
  T1CD7219C3D8A84D52ED5B6A7661ECEE827D34B68745C1CF1307A8F1582D937C26B2226C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.Graphics.winmd
- Size 20KB
- SHA256 6279fc8cbb0f10dcdd1891dd1fce7c77a0e22ea7758af006282f33e5ed1fa6eb
- MD5 c4e10850ec8b88abf104b77267db8d01
- SHA1 15c3b2d3aeb8b496af0b052233a86aa29e2890b3
- SHA512 2fc6ed7ec4f74be8671a192a1fe1d83f40e5de0f012da38879ed848a645173d85a878d980a8855e1b1dd006ef8bcb010aac15a73afea3e43073481202fa447f6
- SSDEEP 384:y20GKBw0DKErH+5zoxPAgALYNfUtebtAD9gclNe1GoR9z5r7cp01E:oBBwQKEr1AgAca6AD9oG09zNE
- TLSH
  T12DA23CCED5447A42CC4DE4721BAAC5A3393883E7250246262B75E85F38D37D4531AFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.InputStateManager.dll
- Size 451KB
- SHA256 8e094a1b35c141f9b912bc97a789b31935215849f9c8d3f634f49e647021cff0
- MD5 4afcb33dbfd72b7f1cc05abbf62f3904
- SHA1 7705477066e026e445e739b180d4d3befdc66e4f
- SHA512 b9dccd02ca80a0a9197e2ca92d0add445485bbe336f752801f6068b0446f5ec1b350f8746a7665e66059463f428e8278ef865d81d8b3b2fcce08cd88cc03b937
- SSDEEP 6144:LWtd/omAg0akGprrCt7mxWE3L4Bp/mLUrzPWZ2RTXxvNb+ALGmUAeVx71HLp:anoXtG9xW0LfUHeZ2RTXxvNdjUFD
- TLSH
  T1B6A45B6BEAA844A0D53AD13C85A78B47F2B1745907319BC742A0926E1F3BFF46D3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Microsoft.Internal.EmailMessage.dll
- Size 243KB
- SHA256 70283bdc1b3aaa015d23283091c1ce327c803149fe1bf5afbeb6285f1a976728
- MD5 1527dc20f79cc3cf1d6610189b974666
- SHA1 67857301be88ed9462775a27fd49613dd58dbf3d
- SHA512 e449f6e30edeb391108a204e88b39b74652c2dfc839e286e8545db83981dc7754c4ee39a97eba3969229e7dae4110c533a1dbc9251dd4bdfa76eb49db3c830d8
- SSDEEP 6144:HuD6RL6Uq4WCNl0qOJa2HclS/78A7bkVo2ysJgJ:1JWNF7v7bQy7
- TLSH
  T184344B6D67E00A08D6BF97F9E0B521015BB6F546D647E7080DA870EE1C73784CE68A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  Microsoft.Internal.FrameworkUdk.dll
- Size 915KB
- SHA256 0c15a25334619c7b53c9f2228938bb08208863715aee6216acb6bb99e5f51295
- MD5 a6a7cf3bb3005f95144250313533b62f
- SHA1 b2a3679038a1a83c4761a499e9f5893efe4f9042
- SHA512 4b0b2063567f5724421ed108dcb2366c12aeaa5ee9986eca3cadd176e2891185d57c3774472d9b8508b261d3c7aea596addfd13b66ed0b49e13911ce6cc6d70e
- SSDEEP 6144:Vugsr4gEcG8XWV1MBtZ/i0sXZWB4WHOqAXPBPNjL1GJSAgRKCTWVVK/boZ3cJVfQ:AJzEcGgWViB7FuqAXjagRKKUGQB
- TLSH
  T1DA15851AEE6951E0C4BAD03C9592612FFCB070A68B7457C3D6929A1F1F32FE4A53E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32