5e6be40bb958ad029bf03fbb69f59e72260dc60e43d352fbd63cc3e2e480cf6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e6be40bb958ad029bf03fbb69f59e72260dc60e43d352fbd63cc3e2e480cf6c
Size

488KB
Sample

221106-waa3gadgf2
MD5

058578be193de89bc66b028517f05863
SHA1

81679ff8c874914daf8738bac544918d1aec89ab
SHA256

5e6be40bb958ad029bf03fbb69f59e72260dc60e43d352fbd63cc3e2e480cf6c
SHA512

ad9592b3b90fcdc327e4c396b1a0395bf4441300f4efa6f9fee11576512aa35b0a6eedebf5901fadc8006fa9dd82bf6389e51791a6bfabf5e811e48f3df10b2e
SSDEEP

6144:GTCqlFFCnp1zD6ZYiQX4qd7mQNoQOMdPx9ibM7g:GTDWzWZFs7FKQOMHF

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  5e6be40bb958ad029bf03fbb69f59e72260dc60e43d352fbd63cc3e2e480cf6c
- Size
  
  488KB
- MD5
  
  058578be193de89bc66b028517f05863
- SHA1
  
  81679ff8c874914daf8738bac544918d1aec89ab
- SHA256
  
  5e6be40bb958ad029bf03fbb69f59e72260dc60e43d352fbd63cc3e2e480cf6c
- SHA512
  
  ad9592b3b90fcdc327e4c396b1a0395bf4441300f4efa6f9fee11576512aa35b0a6eedebf5901fadc8006fa9dd82bf6389e51791a6bfabf5e811e48f3df10b2e
- SSDEEP
  
  6144:GTCqlFFCnp1zD6ZYiQX4qd7mQNoQOMdPx9ibM7g:GTDWzWZFs7FKQOMHF
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing