1c2e7544b9125fb93e3890f94e84b2136986931d90c21c5fcf0fea94ce59823a | Triage

Sharing

General

Target

1c2e7544b9125fb93e3890f94e84b2136986931d90c21c5fcf0fea94ce59823a
Size

122KB
Sample

221120-l9hlgsha62
MD5

14138fcff22e7e837edc1c81087ddc20
SHA1

42ae779e4d7ba3f78ffa3bbe5eca75aee4433bd6
SHA256

1c2e7544b9125fb93e3890f94e84b2136986931d90c21c5fcf0fea94ce59823a
SHA512

19d4ba7ca6fffdb31969b9efd4a94187dca9d5ca175ec00edb154eb4f7f93b1c91e01c6b2fa49b59145aad3295510a5c790050f8aa06750093cabced5eb8776c
SSDEEP

3072:vfXOa+bPak7poz3KTfcCOwTEOxFzGIiUK:vf+dP9+xCOwTXzpiB

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  1c2e7544b9125fb93e3890f94e84b2136986931d90c21c5fcf0fea94ce59823a
- Size
  
  122KB
- MD5
  
  14138fcff22e7e837edc1c81087ddc20
- SHA1
  
  42ae779e4d7ba3f78ffa3bbe5eca75aee4433bd6
- SHA256
  
  1c2e7544b9125fb93e3890f94e84b2136986931d90c21c5fcf0fea94ce59823a
- SHA512
  
  19d4ba7ca6fffdb31969b9efd4a94187dca9d5ca175ec00edb154eb4f7f93b1c91e01c6b2fa49b59145aad3295510a5c790050f8aa06750093cabced5eb8776c
- SSDEEP
  
  3072:vfXOa+bPak7poz3KTfcCOwTEOxFzGIiUK:vf+dP9+xCOwTXzpiB
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing