c8c07c6627b214860b8cd8aeb392a4f71cf18a723c3fc4fc355db7d85ab21011 | Triage

Sharing

General

Target

c8c07c6627b214860b8cd8aeb392a4f71cf18a723c3fc4fc355db7d85ab21011
Size

172KB
Sample

221120-nrkn8sbd83
MD5

33409741f492cf3c455dd0f4c6558d02
SHA1

1db0e4e6a252ed11119640980d60d4e053ad0794
SHA256

c8c07c6627b214860b8cd8aeb392a4f71cf18a723c3fc4fc355db7d85ab21011
SHA512

c20d589f4d8f6cda0d38f3fe02aca2b3f739919433c112ab8564d64feafcd0a3eca5d0c5fc5dd6779c390c0b58d9ea0f9f3916b1e371f602e232abc61c70ae21
SSDEEP

3072:6blF4fF+COAQ0lIlOQhCNZ5uHm+LTZezx20aZNQRF1intGyDpx/yWKiOuGeV:yP8Q0mlOQhCNZ5gm+HkxraZNQR/K/y8O

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  c8c07c6627b214860b8cd8aeb392a4f71cf18a723c3fc4fc355db7d85ab21011
- Size
  
  172KB
- MD5
  
  33409741f492cf3c455dd0f4c6558d02
- SHA1
  
  1db0e4e6a252ed11119640980d60d4e053ad0794
- SHA256
  
  c8c07c6627b214860b8cd8aeb392a4f71cf18a723c3fc4fc355db7d85ab21011
- SHA512
  
  c20d589f4d8f6cda0d38f3fe02aca2b3f739919433c112ab8564d64feafcd0a3eca5d0c5fc5dd6779c390c0b58d9ea0f9f3916b1e371f602e232abc61c70ae21
- SSDEEP
  
  3072:6blF4fF+COAQ0lIlOQhCNZ5uHm+LTZezx20aZNQRF1intGyDpx/yWKiOuGeV:yP8Q0mlOQhCNZ5gm+HkxraZNQR/K/y8O
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing