Overview

overview

6

Static

static

f447854f1b...30.exe

windows7-x64

5

f447854f1b...30.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f447854f1b641e76d44b264ea4af54e9fe608380dfe4ef0e6b8eb596c91a2930

  • Size

    78KB

  • Sample

    221002-nyq5lafbfq

  • MD5

    6dde2930f317d88709123f7da2f86903

  • SHA1

    10f5c0ba4b7dc26ff1b70f218d16eaef904af175

  • SHA256

    f447854f1b641e76d44b264ea4af54e9fe608380dfe4ef0e6b8eb596c91a2930

  • SHA512

    93a58e0f8d6fb089efee6d08a18a937b061c07c938bf8806b18c92dce9e6c6709ebb1e9a05f08743c67b881a41339472deabfbf1a408e712f2182d2a81ab9095

  • SSDEEP

    1536:ntjhRlSFstacc91C5vVSGgr1ACbGKJpPManZAE5Dxf:tjef1C5VLI1ACfpkanBxf

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      f447854f1b641e76d44b264ea4af54e9fe608380dfe4ef0e6b8eb596c91a2930

    • Size

      78KB

    • MD5

      6dde2930f317d88709123f7da2f86903

    • SHA1

      10f5c0ba4b7dc26ff1b70f218d16eaef904af175

    • SHA256

      f447854f1b641e76d44b264ea4af54e9fe608380dfe4ef0e6b8eb596c91a2930

    • SHA512

      93a58e0f8d6fb089efee6d08a18a937b061c07c938bf8806b18c92dce9e6c6709ebb1e9a05f08743c67b881a41339472deabfbf1a408e712f2182d2a81ab9095

    • SSDEEP

      1536:ntjhRlSFstacc91C5vVSGgr1ACbGKJpPManZAE5Dxf:tjef1C5VLI1ACfpkanBxf

    Score
    6/10
    microsoftpersistencephishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks