1e78e663169804d35098a8994f3491ade3c5f6a17bd8be3c1f5e4d7c37c8c916 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e78e663169804d35098a8994f3491ade3c5f6a17bd8be3c1f5e4d7c37c8c916
Size

80KB
Sample

221020-c7xg7abbcr
MD5

800438e22f259fa70db1c80e984dbae0
SHA1

b87c2ad719807f1865ebac7412de6e8d21b3c6d4
SHA256

1e78e663169804d35098a8994f3491ade3c5f6a17bd8be3c1f5e4d7c37c8c916
SHA512

c0a06c723ef6e1ed0ee19873d6f0122d68006ca671a41641e7762ec1e34e52fd0f0c1c97031818b9b865525eaa796d8e6cd0510dc896381a99685d114d6dbb72
SSDEEP

1536:LJv46yoD2BTNz1+M9GLfxw85xzGj1xhPAVV6Pv2o60eJ3:d46yoD2BRZ+M9GTi8vm1xhPcV6P

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  1e78e663169804d35098a8994f3491ade3c5f6a17bd8be3c1f5e4d7c37c8c916
- Size
  
  80KB
- MD5
  
  800438e22f259fa70db1c80e984dbae0
- SHA1
  
  b87c2ad719807f1865ebac7412de6e8d21b3c6d4
- SHA256
  
  1e78e663169804d35098a8994f3491ade3c5f6a17bd8be3c1f5e4d7c37c8c916
- SHA512
  
  c0a06c723ef6e1ed0ee19873d6f0122d68006ca671a41641e7762ec1e34e52fd0f0c1c97031818b9b865525eaa796d8e6cd0510dc896381a99685d114d6dbb72
- SSDEEP
  
  1536:LJv46yoD2BTNz1+M9GLfxw85xzGj1xhPAVV6Pv2o60eJ3:d46yoD2BRZ+M9GTi8vm1xhPcV6P
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing