General
- Target Mwtoinqw.exe
- Size 2.0MB
- Sample221020-yps8pscchn
- SHA256 43e3b54c1d828e19d892ef713583915e2e72858be12fe2d0cc5330ecb69b7eea
- MD5 b63791ced17b581d52f1191a7a9d5014
- SHA1 8bf1a61f3a50551f3fdf8e3f569787a619afafde
- SHA512 62d923ad79151132350ca242a54c6b6cb794f233d5fe5ece7af850a7a9ed2f45f5ddb3b8154c730d9195989275f5055279db6f52c420a9c9f62ab43fbe5ca5c3
- SSDEEP 12288:ky5XlEdyMAILhGou7K+3Fava5sTbSx7SnWZQzjFeM6DJOjB9sTTHyN2EZeGDTsaB:9wvv3SxunYQb6VOrEt2UOSM9m5tO
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Mwtoinqw.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mwtoinqw.exe
Resource
win10v2004-20220812-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Mwtoinqw.exe
- Size 2.0MB
- SHA256 43e3b54c1d828e19d892ef713583915e2e72858be12fe2d0cc5330ecb69b7eea
- MD5 b63791ced17b581d52f1191a7a9d5014
- SHA1 8bf1a61f3a50551f3fdf8e3f569787a619afafde
- SHA512 62d923ad79151132350ca242a54c6b6cb794f233d5fe5ece7af850a7a9ed2f45f5ddb3b8154c730d9195989275f5055279db6f52c420a9c9f62ab43fbe5ca5c3
- SSDEEP 12288:ky5XlEdyMAILhGou7K+3Fava5sTbSx7SnWZQzjFeM6DJOjB9sTTHyN2EZeGDTsaB:9wvv3SxunYQb6VOrEt2UOSM9m5tO
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Accesses Microsoft Outlook profiles
Suspicious use of SetThreadContext