f47a0136c19f34c2525e7f960dd4d8d1f2fe0a02bddefac0a885953dd52f6bc8 | Triage

Sharing

General

Target

f47a0136c19f34c2525e7f960dd4d8d1f2fe0a02bddefac0a885953dd52f6bc8
Size

56KB
Sample

221010-3nmfzseeap
MD5

688fad207f0ab572970aca13e658ca40
SHA1

e2e8ad297320b9753d6b3089d9068b3c062fdd75
SHA256

f47a0136c19f34c2525e7f960dd4d8d1f2fe0a02bddefac0a885953dd52f6bc8
SHA512

7177c51cacbf253ae575c8e9c6c9850d6fc89844128e9aedb9662fb1243cb7ded60223a6da4554277c4d3e21b250b45fb74e30d3f34032864806767bb0dcac68
SSDEEP

768:g+gSAdN1MH37QFRJngBZLhTQdoqWewp9D1wwsj5JHgyNkH:g3TMH37algBZtTQdoBZP1w95JAO

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  f47a0136c19f34c2525e7f960dd4d8d1f2fe0a02bddefac0a885953dd52f6bc8
- Size
  
  56KB
- MD5
  
  688fad207f0ab572970aca13e658ca40
- SHA1
  
  e2e8ad297320b9753d6b3089d9068b3c062fdd75
- SHA256
  
  f47a0136c19f34c2525e7f960dd4d8d1f2fe0a02bddefac0a885953dd52f6bc8
- SHA512
  
  7177c51cacbf253ae575c8e9c6c9850d6fc89844128e9aedb9662fb1243cb7ded60223a6da4554277c4d3e21b250b45fb74e30d3f34032864806767bb0dcac68
- SSDEEP
  
  768:g+gSAdN1MH37QFRJngBZLhTQdoqWewp9D1wwsj5JHgyNkH:g3TMH37algBZtTQdoBZP1w95JAO
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing