521868b77b203905af8bc9d9d6dd4f03cd355f4414354d2beed6f4c3e29931ad | Triage

Sharing

General

Target

521868b77b203905af8bc9d9d6dd4f03cd355f4414354d2beed6f4c3e29931ad
Size

60KB
Sample

221106-wdkq3seaa9
MD5

0c7c3d3c79db81a5b7b3627087c1f910
SHA1

9892dc1a4923167cd26ea5c81202999253483a17
SHA256

521868b77b203905af8bc9d9d6dd4f03cd355f4414354d2beed6f4c3e29931ad
SHA512

e971f92d2826f7a261d345307144ebe3b5fabfd8012b970d596aeb72e7118727cfd445d85251058a0234e8dfe215721ec852d3b49aa27f7bed28bbba2dde8529
SSDEEP

768:OknYgtFvqTOYqnow+F0gJCzA+gNVM2ow7ALNpOl247t6SjaP8myDjMuL/:OkoxWoTWA+n2f7kNKBtTW01L

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  521868b77b203905af8bc9d9d6dd4f03cd355f4414354d2beed6f4c3e29931ad
- Size
  
  60KB
- MD5
  
  0c7c3d3c79db81a5b7b3627087c1f910
- SHA1
  
  9892dc1a4923167cd26ea5c81202999253483a17
- SHA256
  
  521868b77b203905af8bc9d9d6dd4f03cd355f4414354d2beed6f4c3e29931ad
- SHA512
  
  e971f92d2826f7a261d345307144ebe3b5fabfd8012b970d596aeb72e7118727cfd445d85251058a0234e8dfe215721ec852d3b49aa27f7bed28bbba2dde8529
- SSDEEP
  
  768:OknYgtFvqTOYqnow+F0gJCzA+gNVM2ow7ALNpOl247t6SjaP8myDjMuL/:OkoxWoTWA+n2f7kNKBtTW01L
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing