Overview

overview

6

Static

static

899a783f97...36.exe

windows7-x64

5

899a783f97...36.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    899a783f972745ee2e398f8fc70016b5c28c867f9c11104a2efae40b9f53a736

  • Size

    96KB

  • Sample

    221002-a512gsece5

  • MD5

    4819e0b377452677316510d97383bab3

  • SHA1

    67d5a2aced0a5a0e13bc993fe790384500fba987

  • SHA256

    899a783f972745ee2e398f8fc70016b5c28c867f9c11104a2efae40b9f53a736

  • SHA512

    e5895498e9797c0650b26d67d95cc6ffebe19866ef56a97243098df8ba9231efffee5a203656e9910d0654f6fa3a94f5d0a580e0bfdd4c34470b3ee79f25aa77

  • SSDEEP

    1536:TgfBb2wQjibRtsRu2qzh33BcRQx9SDm+ibIfL/WUP99bKNXk9bko:TSBb25jizsKhhv9SDcIf7l19ONXk9ko

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      899a783f972745ee2e398f8fc70016b5c28c867f9c11104a2efae40b9f53a736

    • Size

      96KB

    • MD5

      4819e0b377452677316510d97383bab3

    • SHA1

      67d5a2aced0a5a0e13bc993fe790384500fba987

    • SHA256

      899a783f972745ee2e398f8fc70016b5c28c867f9c11104a2efae40b9f53a736

    • SHA512

      e5895498e9797c0650b26d67d95cc6ffebe19866ef56a97243098df8ba9231efffee5a203656e9910d0654f6fa3a94f5d0a580e0bfdd4c34470b3ee79f25aa77

    • SSDEEP

      1536:TgfBb2wQjibRtsRu2qzh33BcRQx9SDm+ibIfL/WUP99bKNXk9bko:TSBb25jizsKhhv9SDcIf7l19ONXk9ko

    Score
    6/10
    microsoftpersistencephishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks