edfc53858441f2d279f90c46f85ff86cff177450e1a091d5bfafa76507919fa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edfc53858441f2d279f90c46f85ff86cff177450e1a091d5bfafa76507919fa6
Size

76KB
Sample

221020-3wr2fabhap
MD5

7917402a359caf818b56ec4f44bb7f80
SHA1

3ba645c1838c9e244594b50423760ef9d4d00877
SHA256

edfc53858441f2d279f90c46f85ff86cff177450e1a091d5bfafa76507919fa6
SHA512

5b83cd6e8c09450d80529f6c0e14c4862dcc404a39fbde4bd923dde974cc9c030a7318485722e7802a8ec231e07e743323a1c3f5a14ca3b9361cfd3107e3999e
SSDEEP

768:YJsfOUo6vu2Zk39ewPP3/LvjprX9JaGLRz/TYSyntiNg65ZibjC:YJsfrFwPPvLblNJaIR4SWi265kH

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  edfc53858441f2d279f90c46f85ff86cff177450e1a091d5bfafa76507919fa6
- Size
  
  76KB
- MD5
  
  7917402a359caf818b56ec4f44bb7f80
- SHA1
  
  3ba645c1838c9e244594b50423760ef9d4d00877
- SHA256
  
  edfc53858441f2d279f90c46f85ff86cff177450e1a091d5bfafa76507919fa6
- SHA512
  
  5b83cd6e8c09450d80529f6c0e14c4862dcc404a39fbde4bd923dde974cc9c030a7318485722e7802a8ec231e07e743323a1c3f5a14ca3b9361cfd3107e3999e
- SSDEEP
  
  768:YJsfOUo6vu2Zk39ewPP3/LvjprX9JaGLRz/TYSyntiNg65ZibjC:YJsfrFwPPvLblNJaIR4SWi265kH
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing