60e5544eded932a1028dbd53acf8ec9b3e74686d764a708248b81fb01fd018ec | Triage

Sharing

General

Target

60e5544eded932a1028dbd53acf8ec9b3e74686d764a708248b81fb01fd018ec
Size

328KB
Sample

221002-tvycdsedc2
MD5

009f6234ade6710fcb927900c6b19490
SHA1

14e384d36add10b9c74c72d1d55fae60a226f2b5
SHA256

60e5544eded932a1028dbd53acf8ec9b3e74686d764a708248b81fb01fd018ec
SHA512

fe113111d047bdc51d83aa729d5d5c8fdea6eb2e6d37201d027f777899e9d344e6f4a02b272c8dfc2e04815b4d32048b6c60179672155698b4f9a3863b9d4dff
SSDEEP

6144:wVIKKJcfh2mq1ZB9YIvoLxvTKJcfh2m21ZXp+:qIKpq1ZB9YKKxbp21ZXA

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  60e5544eded932a1028dbd53acf8ec9b3e74686d764a708248b81fb01fd018ec
- Size
  
  328KB
- MD5
  
  009f6234ade6710fcb927900c6b19490
- SHA1
  
  14e384d36add10b9c74c72d1d55fae60a226f2b5
- SHA256
  
  60e5544eded932a1028dbd53acf8ec9b3e74686d764a708248b81fb01fd018ec
- SHA512
  
  fe113111d047bdc51d83aa729d5d5c8fdea6eb2e6d37201d027f777899e9d344e6f4a02b272c8dfc2e04815b4d32048b6c60179672155698b4f9a3863b9d4dff
- SSDEEP
  
  6144:wVIKKJcfh2mq1ZB9YIvoLxvTKJcfh2m21ZXp+:qIKpq1ZB9YKKxbp21ZXA
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing