eadf089e41d630e34f14f6220b71834f56444ea490a47f09035f99cf72215853 | Triage

Sharing

General

Target

eadf089e41d630e34f14f6220b71834f56444ea490a47f09035f99cf72215853
Size

38KB
Sample

221120-skaynsdc8v
MD5

404a49d43c0a479e6f8b0459fa11e390
SHA1

767902226792262e764425e8d8bcc69bf71540e4
SHA256

eadf089e41d630e34f14f6220b71834f56444ea490a47f09035f99cf72215853
SHA512

e6f3ee006ef63a5a3592e7fb8bc69673cc4ec110cd8ed54c09c417e7b457173fcd0a2df10017de70a9db2f03d611e54e90401e30f25f3c2d29934bab0d142d21
SSDEEP

384:6bxiOvYRkLuNDxEg1GxhSLa/lxbgpqhn1zmZjmDZBv0xAXPpOYW4kWPZB8Za009w:pE8NDxAhqCTpbLDh9y35

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  eadf089e41d630e34f14f6220b71834f56444ea490a47f09035f99cf72215853
- Size
  
  38KB
- MD5
  
  404a49d43c0a479e6f8b0459fa11e390
- SHA1
  
  767902226792262e764425e8d8bcc69bf71540e4
- SHA256
  
  eadf089e41d630e34f14f6220b71834f56444ea490a47f09035f99cf72215853
- SHA512
  
  e6f3ee006ef63a5a3592e7fb8bc69673cc4ec110cd8ed54c09c417e7b457173fcd0a2df10017de70a9db2f03d611e54e90401e30f25f3c2d29934bab0d142d21
- SSDEEP
  
  384:6bxiOvYRkLuNDxEg1GxhSLa/lxbgpqhn1zmZjmDZBv0xAXPpOYW4kWPZB8Za009w:pE8NDxAhqCTpbLDh9y35
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing