ca3146f469d3fdd42fa91412fab6e44960b80d3818437e5527cabb1de7417f26 | Triage

Sharing

General

Target

ca3146f469d3fdd42fa91412fab6e44960b80d3818437e5527cabb1de7417f26
Size

281KB
Sample

221121-g2gl1afb22
MD5

3b272b76e41d92f3f40d524497df72f0
SHA1

9bb5d6cce9faea89343407eca675f97f64607b36
SHA256

ca3146f469d3fdd42fa91412fab6e44960b80d3818437e5527cabb1de7417f26
SHA512

cfbd8ad98b240cc399f316f1adceebbbaa8da15e9f2a3d2bb4de1b5821e51c1b7f88eab982eed48b822da33d574659a43fa329ff29a57c823a65f026a9b76894
SSDEEP

3072:qBkWSa5lEju0rjllfD3FXslLTFDGuzGNUNn9Gn1N7TqY3RuzQfieDTlfD3FXsiNR:q6GyvfD3FW9mL7WYZficfD3FziS

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  ca3146f469d3fdd42fa91412fab6e44960b80d3818437e5527cabb1de7417f26
- Size
  
  281KB
- MD5
  
  3b272b76e41d92f3f40d524497df72f0
- SHA1
  
  9bb5d6cce9faea89343407eca675f97f64607b36
- SHA256
  
  ca3146f469d3fdd42fa91412fab6e44960b80d3818437e5527cabb1de7417f26
- SHA512
  
  cfbd8ad98b240cc399f316f1adceebbbaa8da15e9f2a3d2bb4de1b5821e51c1b7f88eab982eed48b822da33d574659a43fa329ff29a57c823a65f026a9b76894
- SSDEEP
  
  3072:qBkWSa5lEju0rjllfD3FXslLTFDGuzGNUNn9Gn1N7TqY3RuzQfieDTlfD3FXsiNR:q6GyvfD3FW9mL7WYZficfD3FziS
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing