Triage | Malware sandboxing report by Hatching Triage

Sharing

General

Target

cfee68b44ab35ac92b2047a62c68880be67cc607abb932765735f41387be1c3b
Size

86KB
Sample

221003-b8g88abbd7
MD5

09d3e7def01c15cc15b5ebceb88ddeba
SHA1

44c5bfab99c387554f63b53ebdd6ad276b699327
SHA256

cfee68b44ab35ac92b2047a62c68880be67cc607abb932765735f41387be1c3b
SHA512

a5ab3fa8f79666bc59ff96964552b1da31fb611a93f52569780ca2a1f0d0e80ceeb4de2928aa16ba1a3b15845d6c29ef6008b75d6540d8e82836731a386b3db5
SSDEEP

1536:xWQB0RdzmCpJ7oPf2PnR/qRy24uBTWEFiaLw1bcYfAgmQyG8baO:xWE03LX7bR/qgNqTNFhM1bcSjyG8baO

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  cfee68b44ab35ac92b2047a62c68880be67cc607abb932765735f41387be1c3b
- Size
  
  86KB
- MD5
  
  09d3e7def01c15cc15b5ebceb88ddeba
- SHA1
  
  44c5bfab99c387554f63b53ebdd6ad276b699327
- SHA256
  
  cfee68b44ab35ac92b2047a62c68880be67cc607abb932765735f41387be1c3b
- SHA512
  
  a5ab3fa8f79666bc59ff96964552b1da31fb611a93f52569780ca2a1f0d0e80ceeb4de2928aa16ba1a3b15845d6c29ef6008b75d6540d8e82836731a386b3db5
- SSDEEP
  
  1536:xWQB0RdzmCpJ7oPf2PnR/qRy24uBTWEFiaLw1bcYfAgmQyG8baO:xWE03LX7bR/qgNqTNFhM1bcSjyG8baO
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix

Collection

Command and Control

Credential Access

Defense Evasion

Modify Registry

Discovery

Execution

Exfiltration

Impact

Initial Access

Lateral Movement

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing