General
- Target 6a341b3e9c265e672ac0bb8c72a7fb2b72f8872a1a12b5d1fa48b868ca43f8b4.exe
- Size 407KB
- Sample260813-tp8wyack51
- SHA256 6a341b3e9c265e672ac0bb8c72a7fb2b72f8872a1a12b5d1fa48b868ca43f8b4
- MD5 e97475cc33df65c170676a4ca5dbea83
- SHA1 862b3c603089a46cd40d22bce0db05fd2840fc8d
- SHA512 04b0ad0ab66f65e4584dcf0bc9af84c4bee2130be61afa6b43250db3c91f1c8101207403360ad63e33ce13517a54a5eb61a6f9890de2aa4660ac784b035a58dd
- SSDEEP 6144:0TJdf7/yGi5aezpi86ehn0NbAbSOklUVAdcz:0TJdzaGnep6in3k
- TLSH T12994E52973F88A09F2FF6FB5A8B049118A32F84B9D35D74E1988409D0DB2B91DD50B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a341b3e9c265e672ac0bb8c72a7fb2b72f8872a1a12b5d1fa48b868ca43f8b4.exe
Resource
win10v2004-20260513-en
3 signatures
40 seconds
Behavioral task
behavioral2
Sample
6a341b3e9c265e672ac0bb8c72a7fb2b72f8872a1a12b5d1fa48b868ca43f8b4.exe
Resource
win11ltsc2024-20260709-en
7 signatures
40 seconds
Malware Config
Targets
-
- Target 6a341b3e9c265e672ac0bb8c72a7fb2b72f8872a1a12b5d1fa48b868ca43f8b4.exe
- Size 407KB
- SHA256 6a341b3e9c265e672ac0bb8c72a7fb2b72f8872a1a12b5d1fa48b868ca43f8b4
- MD5 e97475cc33df65c170676a4ca5dbea83
- SHA1 862b3c603089a46cd40d22bce0db05fd2840fc8d
- SHA512 04b0ad0ab66f65e4584dcf0bc9af84c4bee2130be61afa6b43250db3c91f1c8101207403360ad63e33ce13517a54a5eb61a6f9890de2aa4660ac784b035a58dd
- SSDEEP 6144:0TJdf7/yGi5aezpi86ehn0NbAbSOklUVAdcz:0TJdzaGnep6in3k
- TLSH T12994E52973F88A09F2FF6FB5A8B049118A32F84B9D35D74E1988409D0DB2B91DD50B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1