Overview

overview

7

Static

static

526f1e6cf6...mp.exe

windows7_x64

1

526f1e6cf6...mp.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    526f1e6cf62c73b2f8e4c325c234bee6a2590de0.tmp

  • Size

    12.2MB

  • Sample

    211109-tdyxlafee3

  • MD5

    3d59560cefc7bc7cd835d7cfa9e76615

  • SHA1

    526f1e6cf62c73b2f8e4c325c234bee6a2590de0

  • SHA256

    479e35ec9e5fb0d36987bc9941b243a1b943ae20cb063b44b278b7adee4aa9df

  • SHA512

    9cf48a91d248abd437897ae71beeca2f11b27e4ae0f4ab7e04f5d147e8d6bc677b54ff71912f46fcf7134e5ad57cfc4d94126dd2df6a4b2d38b8b31e949b9593

Score
7/10
microsoftphishing

Malware Config

Targets

    • Target

      526f1e6cf62c73b2f8e4c325c234bee6a2590de0.tmp

    • Size

      12.2MB

    • MD5

      3d59560cefc7bc7cd835d7cfa9e76615

    • SHA1

      526f1e6cf62c73b2f8e4c325c234bee6a2590de0

    • SHA256

      479e35ec9e5fb0d36987bc9941b243a1b943ae20cb063b44b278b7adee4aa9df

    • SHA512

      9cf48a91d248abd437897ae71beeca2f11b27e4ae0f4ab7e04f5d147e8d6bc677b54ff71912f46fcf7134e5ad57cfc4d94126dd2df6a4b2d38b8b31e949b9593

    Score
    7/10
    microsoftphishing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks