hxxps://experience[.]microsoft[.]com/isa/OMKYDYEMGTADPRLKHDOBBMHOLAPQOTAI/ms/hostpagefy23h1[.]html?__sid__=m_6_KxJGsxYGpgGZy8FM6VLn8ZRfCOJnjvAkFeBp6BDcdSwsNrEIoCISwV7JR5gcuIIf5ni7ohmvJtemUQojKg2&l=9

Resubmissions

29-09-2022 17:04

220929-vlrnxsbed2 6

29-09-2022 17:02

220929-vj39yacdfl 6

Sharing

Copy URL

Twitter E-mail

General

Target

https://experience.microsoft.com/isa/OMKYDYEMGTADPRLKHDOBBMHOLAPQOTAI/ms/hostpagefy23h1.html?__sid__=m_6_KxJGsxYGpgGZy8FM6VLn8ZRfCOJnjvAkFeBp6BDcdSwsNrEIoCISwV7JR5gcuIIf5ni7ohmvJtemUQojKg2&l=9
Sample

220929-vj39yacdfl

Score

6^/10

Malware Config

Targets

- Target
  
  https://experience.microsoft.com/isa/OMKYDYEMGTADPRLKHDOBBMHOLAPQOTAI/ms/hostpagefy23h1.html?__sid__=m_6_KxJGsxYGpgGZy8FM6VLn8ZRfCOJnjvAkFeBp6BDcdSwsNrEIoCISwV7JR5gcuIIf5ni7ohmvJtemUQojKg2&l=9
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Query Registry

T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Adds Run key to start application

Detected potential entity reuse from brand microsoft.

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

urlscan1

behavioral1