Overview

overview

8

Static

static

1716551e51...c1.exe

windows7-x64

8

1716551e51...c1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1716551e51bb3fbe9c1dac5a9d91885ce6546bbea152faf699dd77b1ba8748c1

  • Size

    792KB

  • Sample

    221120-fe1wpagc89

  • MD5

    5b028e523bdecab845d4c910bcdfec5b

  • SHA1

    ddfcbc22fc6f09b9a8a389aedecde2c63ae6ca6b

  • SHA256

    1716551e51bb3fbe9c1dac5a9d91885ce6546bbea152faf699dd77b1ba8748c1

  • SHA512

    8bb0b00e5d361fff3d6576197b143c590b2f8af108a00a1a4e0f0f7d3da152c0b04216db0ae4c862cff631bb5d4e68ea183dafe0d13e08326916e3ad52764789

  • SSDEEP

    12288:52JylsKTWeDQ4dvfLKVOTDPc7IudTc67BmN6IN2Irz0vu+agJ:52JyxCYv5GIQc90InrR+

Score
8/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      1716551e51bb3fbe9c1dac5a9d91885ce6546bbea152faf699dd77b1ba8748c1

    • Size

      792KB

    • MD5

      5b028e523bdecab845d4c910bcdfec5b

    • SHA1

      ddfcbc22fc6f09b9a8a389aedecde2c63ae6ca6b

    • SHA256

      1716551e51bb3fbe9c1dac5a9d91885ce6546bbea152faf699dd77b1ba8748c1

    • SHA512

      8bb0b00e5d361fff3d6576197b143c590b2f8af108a00a1a4e0f0f7d3da152c0b04216db0ae4c862cff631bb5d4e68ea183dafe0d13e08326916e3ad52764789

    • SSDEEP

      12288:52JylsKTWeDQ4dvfLKVOTDPc7IudTc67BmN6IN2Irz0vu+agJ:52JyxCYv5GIQc90InrR+

    Score
    8/10
    persistencemicrosoftphishing

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks