e5bdb070960357eaab56367e7c56f3280d1911b29b683448717620450adb416b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5bdb070960357eaab56367e7c56f3280d1911b29b683448717620450adb416b
Size

42KB
Sample

221014-lkztgaheh8
MD5

547e0a5356b2c0c5973fe05399671d90
SHA1

94f27dcf06c112cbac29b03c8c87c06da8e92e8a
SHA256

e5bdb070960357eaab56367e7c56f3280d1911b29b683448717620450adb416b
SHA512

cf9b02293a25260c259690568e542cdd02fada012336f3695ad9ea8a5c5ec8c98ad8dd20892baadb4ad3a745efb04d4b75eae63ed120a53b7c642d7a8c4bce6f
SSDEEP

768:AknYgtFvqTOYq8ow+F0gJZzA+gNVM2oqfauWKCm:AkoxNoT5A+n2dCPKCm

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  e5bdb070960357eaab56367e7c56f3280d1911b29b683448717620450adb416b
- Size
  
  42KB
- MD5
  
  547e0a5356b2c0c5973fe05399671d90
- SHA1
  
  94f27dcf06c112cbac29b03c8c87c06da8e92e8a
- SHA256
  
  e5bdb070960357eaab56367e7c56f3280d1911b29b683448717620450adb416b
- SHA512
  
  cf9b02293a25260c259690568e542cdd02fada012336f3695ad9ea8a5c5ec8c98ad8dd20892baadb4ad3a745efb04d4b75eae63ed120a53b7c642d7a8c4bce6f
- SSDEEP
  
  768:AknYgtFvqTOYq8ow+F0gJZzA+gNVM2oqfauWKCm:AkoxNoT5A+n2dCPKCm
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing