3357239791dff2f4a5d82466922aebeb3abc7fae2cfe8d120aac756995cedbba | Triage

Sharing

General

Target

3357239791dff2f4a5d82466922aebeb3abc7fae2cfe8d120aac756995cedbba
Size

101KB
Sample

221002-t4abxsgdam
MD5

6c1b08bd5490dc7f5ac7e1af76bde4b0
SHA1

18d8ad7b31db068f8bd5f935bf1312ac9d97679a
SHA256

3357239791dff2f4a5d82466922aebeb3abc7fae2cfe8d120aac756995cedbba
SHA512

69e54cfb53bbeac68dae1e5ef85315fcdbfdf2fc9ea459d32ae571716982c86568544408ab90de6eaa1927bf368bffce5ac1176b78885107d22296fc07afb568
SSDEEP

1536:1+62+8i2B8i2t8i2/8i2l8i2K8i2q8i2t8i2z8i2U8i2c8i2K8i2j8i2H8i2J8i:F28GmAGdpCwLHhQ8uINXC1d

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  3357239791dff2f4a5d82466922aebeb3abc7fae2cfe8d120aac756995cedbba
- Size
  
  101KB
- MD5
  
  6c1b08bd5490dc7f5ac7e1af76bde4b0
- SHA1
  
  18d8ad7b31db068f8bd5f935bf1312ac9d97679a
- SHA256
  
  3357239791dff2f4a5d82466922aebeb3abc7fae2cfe8d120aac756995cedbba
- SHA512
  
  69e54cfb53bbeac68dae1e5ef85315fcdbfdf2fc9ea459d32ae571716982c86568544408ab90de6eaa1927bf368bffce5ac1176b78885107d22296fc07afb568
- SSDEEP
  
  1536:1+62+8i2B8i2t8i2/8i2l8i2K8i2q8i2t8i2z8i2U8i2c8i2K8i2j8i2H8i2J8i:F28GmAGdpCwLHhQ8uINXC1d
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing