d639af4145bccdcd8c6329f686e2851ac3d787cd4f85f358f21f777b82bfd9c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d639af4145bccdcd8c6329f686e2851ac3d787cd4f85f358f21f777b82bfd9c8
Size

2.9MB
Sample

221025-fm7n7sbfc5
MD5

e5a310f5ec6d395f5e018dbd4ab326cc
SHA1

699dd9284052d91c2a0c78c117f7f42b9fb0c00f
SHA256

d639af4145bccdcd8c6329f686e2851ac3d787cd4f85f358f21f777b82bfd9c8
SHA512

5a6932ba0b61ad8d5a1643186a6710e35608714b8383cde8e983fdb1246c9bf639c9301b80efe09b07cfd9013f37ac31bba6b43157681ea06ae10c43f52bad08
SSDEEP

24576:ddzswxeqWiZUCM2OLmoQKXIgzodDjkpa+WlnwQwDiREzKEod67yOUIftaZ:ddKeUCPOLmoQo02iNefu

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  d639af4145bccdcd8c6329f686e2851ac3d787cd4f85f358f21f777b82bfd9c8
- Size
  
  2.9MB
- MD5
  
  e5a310f5ec6d395f5e018dbd4ab326cc
- SHA1
  
  699dd9284052d91c2a0c78c117f7f42b9fb0c00f
- SHA256
  
  d639af4145bccdcd8c6329f686e2851ac3d787cd4f85f358f21f777b82bfd9c8
- SHA512
  
  5a6932ba0b61ad8d5a1643186a6710e35608714b8383cde8e983fdb1246c9bf639c9301b80efe09b07cfd9013f37ac31bba6b43157681ea06ae10c43f52bad08
- SSDEEP
  
  24576:ddzswxeqWiZUCM2OLmoQKXIgzodDjkpa+WlnwQwDiREzKEod67yOUIftaZ:ddKeUCPOLmoQo02iNefu
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing