97628be637ad7f98424bdaab659d591f050ce68ea73c66c53155a68621302a87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97628be637ad7f98424bdaab659d591f050ce68ea73c66c53155a68621302a87
Size

62KB
Sample

221020-anje4sefhp
MD5

a0fc3be25684932ae14a7e59542a9d70
SHA1

9c6dc1e4c3efbb7d0af8471e2036e05288c8c59a
SHA256

97628be637ad7f98424bdaab659d591f050ce68ea73c66c53155a68621302a87
SHA512

d284eafc8939124f51b308db7567522ee76f4a9cbff9e4eaf5ac0326c04591f7425269091620a8fd17f4bfde8966f14d035b600a3b236941e728fc3a1a3c0003
SSDEEP

1536:pK1a7QY3noVQvoaRwMHdnV5QJscp2u1zlsRgLhLV74IbY+M:pK1eQY3noVQvoaRwMHdnV5QJscpl1zlk

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  97628be637ad7f98424bdaab659d591f050ce68ea73c66c53155a68621302a87
- Size
  
  62KB
- MD5
  
  a0fc3be25684932ae14a7e59542a9d70
- SHA1
  
  9c6dc1e4c3efbb7d0af8471e2036e05288c8c59a
- SHA256
  
  97628be637ad7f98424bdaab659d591f050ce68ea73c66c53155a68621302a87
- SHA512
  
  d284eafc8939124f51b308db7567522ee76f4a9cbff9e4eaf5ac0326c04591f7425269091620a8fd17f4bfde8966f14d035b600a3b236941e728fc3a1a3c0003
- SSDEEP
  
  1536:pK1a7QY3noVQvoaRwMHdnV5QJscp2u1zlsRgLhLV74IbY+M:pK1eQY3noVQvoaRwMHdnV5QJscpl1zlk
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing