196633dffb848a48f81df7fa005bfbaa4aa565a25a8d9a406ea26281f93d9626 | Triage

Sharing

General

Target

196633dffb848a48f81df7fa005bfbaa4aa565a25a8d9a406ea26281f93d9626.bin
Size

238KB
Sample

211108-f9ea6sgegj
MD5

75f8ae6b07543c2979c5a09fdceee09e
SHA1

4c42559c7ef8a152845a0d70401713bf851f0254
SHA256

196633dffb848a48f81df7fa005bfbaa4aa565a25a8d9a406ea26281f93d9626
SHA512

a42f0aa423f14755713cb553642e67f6ac4e4f47409fff5b146e164b9f43fed4b77fa80bfccae447276bac229ff69394c5423ce8515c332b808978136d5d6aae

Score

7^/10

microsoft phishing

Malware Config

Targets

- Target
  
  196633dffb848a48f81df7fa005bfbaa4aa565a25a8d9a406ea26281f93d9626.bin
- Size
  
  238KB
- MD5
  
  75f8ae6b07543c2979c5a09fdceee09e
- SHA1
  
  4c42559c7ef8a152845a0d70401713bf851f0254
- SHA256
  
  196633dffb848a48f81df7fa005bfbaa4aa565a25a8d9a406ea26281f93d9626
- SHA512
  
  a42f0aa423f14755713cb553642e67f6ac4e4f47409fff5b146e164b9f43fed4b77fa80bfccae447276bac229ff69394c5423ce8515c332b808978136d5d6aae
Score

7^/10

microsoft phishing
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing