c82738da336c4f6fc9814f5af6160d077a3f4f10e9dab476285f7e5971386de8 | Triage

Sharing

General

Target

c82738da336c4f6fc9814f5af6160d077a3f4f10e9dab476285f7e5971386de8
Size

29KB
Sample

221011-vmrejsehd8
MD5

0a66c0d2799e930c04525268a04fad50
SHA1

ed08ce919e89f39fb43c7b418db1ea45fa1f53ea
SHA256

c82738da336c4f6fc9814f5af6160d077a3f4f10e9dab476285f7e5971386de8
SHA512

7f168d21ffaa9d396f56f34969d676b3122c1e116d4a9398676b4c1237cde0de98929ac3287bd78172c544c4e5e714b7934fb9fb67de79b26b641cf196a2f531
SSDEEP

384:S1MBX+ZjmDZBv0xAXOMWO0W/1k440GftpBj4GLviqis9QlcffyqOe9:LWoDDiPXisKl4qx

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  c82738da336c4f6fc9814f5af6160d077a3f4f10e9dab476285f7e5971386de8
- Size
  
  29KB
- MD5
  
  0a66c0d2799e930c04525268a04fad50
- SHA1
  
  ed08ce919e89f39fb43c7b418db1ea45fa1f53ea
- SHA256
  
  c82738da336c4f6fc9814f5af6160d077a3f4f10e9dab476285f7e5971386de8
- SHA512
  
  7f168d21ffaa9d396f56f34969d676b3122c1e116d4a9398676b4c1237cde0de98929ac3287bd78172c544c4e5e714b7934fb9fb67de79b26b641cf196a2f531
- SSDEEP
  
  384:S1MBX+ZjmDZBv0xAXOMWO0W/1k440GftpBj4GLviqis9QlcffyqOe9:LWoDDiPXisKl4qx
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing