Overview

overview

7

Static

static

d991aa2b1f...26.exe

windows7_x64

1

d991aa2b1f...26.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426

  • Size

    192KB

  • Sample

    211026-x9t53aaafp

  • MD5

    20ab243fee91b6c8df23e1ddefff2727

  • SHA1

    e2b098d36e51d2b7405fadbd578cf9774433f85a

  • SHA256

    d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426

  • SHA512

    153955fb3418797676a49d3d563affc8b5a987a5e5740de29ae2b24ba178c39ee95346b98b7ec79bf6c370cf0067eb206abc68465aadd5cd7cf31ab55071fde0

Score
7/10
microsoftphishing

Malware Config

Targets

    • Target

      d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426

    • Size

      192KB

    • MD5

      20ab243fee91b6c8df23e1ddefff2727

    • SHA1

      e2b098d36e51d2b7405fadbd578cf9774433f85a

    • SHA256

      d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426

    • SHA512

      153955fb3418797676a49d3d563affc8b5a987a5e5740de29ae2b24ba178c39ee95346b98b7ec79bf6c370cf0067eb206abc68465aadd5cd7cf31ab55071fde0

    Score
    7/10
    microsoftphishing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks