c90bd8239b0fb12a235e47ceb8f28020cdbdab5f31634bf17d161574ba0cc772 | Triage

Sharing

General

Target

c90bd8239b0fb12a235e47ceb8f28020cdbdab5f31634bf17d161574ba0cc772
Size

199KB
Sample

221002-d6kbxafde6
MD5

65a5f38415352c901ff68b66096a1a53
SHA1

80b281c372344246934da2f2e62133aa26f9b1d0
SHA256

c90bd8239b0fb12a235e47ceb8f28020cdbdab5f31634bf17d161574ba0cc772
SHA512

ba4870278e8a748b406372d2786392141c0509dcb1259b0dfc13720c1cbef6d0e48008eab22205e1740a30edef53f3ce396d8f1ef40b61693fddd76847311463
SSDEEP

1536:y8KB6FRAxM4Bss1Tssssssssssssssfz8ssZU72CHLFIZdM/ntcdUhjBY0BqndOf:jKeexP8JUqILFIZO/a+JBGndOUQu

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  c90bd8239b0fb12a235e47ceb8f28020cdbdab5f31634bf17d161574ba0cc772
- Size
  
  199KB
- MD5
  
  65a5f38415352c901ff68b66096a1a53
- SHA1
  
  80b281c372344246934da2f2e62133aa26f9b1d0
- SHA256
  
  c90bd8239b0fb12a235e47ceb8f28020cdbdab5f31634bf17d161574ba0cc772
- SHA512
  
  ba4870278e8a748b406372d2786392141c0509dcb1259b0dfc13720c1cbef6d0e48008eab22205e1740a30edef53f3ce396d8f1ef40b61693fddd76847311463
- SSDEEP
  
  1536:y8KB6FRAxM4Bss1Tssssssssssssssfz8ssZU72CHLFIZdM/ntcdUhjBY0BqndOf:jKeexP8JUqILFIZO/a+JBGndOUQu
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing