a2b687cbda18dddac712c24caa2141da516b72f5a1bad616b4fef7ffba24fb08 | Triage

Sharing

General

Target

b0ad5dcd8ac0b4f5447f12f780515e27965c4d42.exe
Size

2.1MB
Sample

210924-pt1nxahaen
MD5

863dae5036e5facabf4d71e57114dba3
SHA1

b0ad5dcd8ac0b4f5447f12f780515e27965c4d42
SHA256

a2b687cbda18dddac712c24caa2141da516b72f5a1bad616b4fef7ffba24fb08
SHA512

89fc97069d084a27a1ec1eedc60aaee73dbe7a16291e8bf3467f60f4af7ea35562a25eb84fc3a21fde536d63ef61c4f7fc74d5ad7d1cf73c68267a1b04a8338d

Score

7^/10

microsoft phishing

Malware Config

Targets

- Target
  
  b0ad5dcd8ac0b4f5447f12f780515e27965c4d42.exe
- Size
  
  2.1MB
- MD5
  
  863dae5036e5facabf4d71e57114dba3
- SHA1
  
  b0ad5dcd8ac0b4f5447f12f780515e27965c4d42
- SHA256
  
  a2b687cbda18dddac712c24caa2141da516b72f5a1bad616b4fef7ffba24fb08
- SHA512
  
  89fc97069d084a27a1ec1eedc60aaee73dbe7a16291e8bf3467f60f4af7ea35562a25eb84fc3a21fde536d63ef61c4f7fc74d5ad7d1cf73c68267a1b04a8338d
Score

7^/10

microsoft phishing
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing