05c15548f0f4a66d4c42b40c04eca1b4449bbc9958bce16e15d561ff02199c10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05c15548f0f4a66d4c42b40c04eca1b4449bbc9958bce16e15d561ff02199c10
Size

96KB
Sample

221031-alwmnagbc2
MD5

a232b9a85676ca3a64b3b27b4e1b3810
SHA1

874d5279db8e40cbf5d6d2586191ce49118a3711
SHA256

05c15548f0f4a66d4c42b40c04eca1b4449bbc9958bce16e15d561ff02199c10
SHA512

eabe4395f539be7477a1e0293cdb859998ab5dc47e4dd69d913467ff4c5f5ffc3dfcad3bc86277d457173a5ee65ce624de27bb4ce49a45fedcf7718af248ea91
SSDEEP

768:ommUI3C3hNavk7eulKb2CcJlcizoMqKsxN4fADVe61rguZXN8/vM7bkrefb9Tqsb:Vdhck64T0MyEAD8GXN+I7fJ+aCl1feF

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  05c15548f0f4a66d4c42b40c04eca1b4449bbc9958bce16e15d561ff02199c10
- Size
  
  96KB
- MD5
  
  a232b9a85676ca3a64b3b27b4e1b3810
- SHA1
  
  874d5279db8e40cbf5d6d2586191ce49118a3711
- SHA256
  
  05c15548f0f4a66d4c42b40c04eca1b4449bbc9958bce16e15d561ff02199c10
- SHA512
  
  eabe4395f539be7477a1e0293cdb859998ab5dc47e4dd69d913467ff4c5f5ffc3dfcad3bc86277d457173a5ee65ce624de27bb4ce49a45fedcf7718af248ea91
- SSDEEP
  
  768:ommUI3C3hNavk7eulKb2CcJlcizoMqKsxN4fADVe61rguZXN8/vM7bkrefb9Tqsb:Vdhck64T0MyEAD8GXN+I7fJ+aCl1feF
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing