99437528399fada1ed73fb690135ac2be7471c577d47f2f6831934243056eb07 | Triage

Sharing

General

Target

99437528399fada1ed73fb690135ac2be7471c577d47f2f6831934243056eb07
Size

525KB
Sample

221002-d8w4gsfee4
MD5

7c241d6b1a4b11dbf0ad7dad4b28df0a
SHA1

116c067d6ce31d72dfc6564db48eb5ed3ab4706a
SHA256

99437528399fada1ed73fb690135ac2be7471c577d47f2f6831934243056eb07
SHA512

24480c5f58f66c7ae7f8dc100e16c115d2558bc397e0439e40a77b45c5285ec974568b7c3190203ec4c45bb8ea7d216baecc2ca5c7b95ff9fb2556057db94365
SSDEEP

12288:QgttUyOvOOVd+hfUkfSbYTaKkmSxDuIQ/fJk1E:lUyJed+xUkfScmKkmMDLQ/fJka

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  99437528399fada1ed73fb690135ac2be7471c577d47f2f6831934243056eb07
- Size
  
  525KB
- MD5
  
  7c241d6b1a4b11dbf0ad7dad4b28df0a
- SHA1
  
  116c067d6ce31d72dfc6564db48eb5ed3ab4706a
- SHA256
  
  99437528399fada1ed73fb690135ac2be7471c577d47f2f6831934243056eb07
- SHA512
  
  24480c5f58f66c7ae7f8dc100e16c115d2558bc397e0439e40a77b45c5285ec974568b7c3190203ec4c45bb8ea7d216baecc2ca5c7b95ff9fb2556057db94365
- SSDEEP
  
  12288:QgttUyOvOOVd+hfUkfSbYTaKkmSxDuIQ/fJk1E:lUyJed+xUkfScmKkmMDLQ/fJka
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing