Overview

overview

8

Static

static

5

NARESCO CO...RY.exe

windows10-2004-x64

6

NARESCO CO...RY.exe

windows10-2004-x64

6

NARESCO CO...ue.dll

windows10-2004-x64

8

NARESCO CO...ue.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    NARESCO CONTRACTING - MELANITE ENERGY FACTORY.tar
  • Size 7.0MB
  • Sample260804-gx93raec52
  • SHA256 f1d2b5f5a4cc23315140b360065653ed30d7ee302f3f232a973ea586bff76cb4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collection

Malware Config

Targets

    • Target
      NARESCO CONTRACTING - MELANITE ENERGY FACTORY/Bill of Quantity - NARESCO CONTRACTING - MELANITE ENERGY FACTORY.exe
    • Size 688KB
    • SHA256 5565683f673e9d6805249815f7595bb2d0b9c2d2a8402059c9266e99efe4b2a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    collection
    behavioral1
    • Target
      NARESCO CONTRACTING - MELANITE ENERGY FACTORY/Scope of Work -NARESCO CONTRACTING - MELANITE ENERGY FACTORY.exe
    • Size 688KB
    • SHA256 5565683f673e9d6805249815f7595bb2d0b9c2d2a8402059c9266e99efe4b2a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    collection
    behavioral2
    • Target
      NARESCO CONTRACTING - MELANITE ENERGY FACTORY/mozglue.dll
    • Size 5.6MB
    • SHA256 30c77a9bce727c4df56de3eb95d6dcfb4dcba255e46a46f811a63cc8ae96a9ba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    collection

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Accesses Microsoft Outlook accounts

      collection

    • Accesses Microsoft Outlook profiles

      collection
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks