e9766055710d099b014f7fbab8e001722e7a0d43e938f785a4a5128b4ad815c4 | Triage

Sharing

General

Target

e9766055710d099b014f7fbab8e001722e7a0d43e938f785a4a5128b4ad815c4
Size

827KB
Sample

221121-gqhd6aad31
MD5

39172a4c3f5c0a3c2b9e12429b268bc0
SHA1

86c4970a1d27cc96e39aed4defecc6985c99438f
SHA256

e9766055710d099b014f7fbab8e001722e7a0d43e938f785a4a5128b4ad815c4
SHA512

a45892681c6cfb2f050c661219ff6cf134112d3b85ddfa0530e47ef72d885202b414709547ceec3f3bef3311b55a3b6b698742b95aa7a840544b169c29a9e388
SSDEEP

3072:8cs8/R3VAFOa4E/nl8tssSQuYJpzZp1act4cn/qR3VAFOa4yKqdw:8cs8ZZ7elcssF/5n0Z7y5dw

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  e9766055710d099b014f7fbab8e001722e7a0d43e938f785a4a5128b4ad815c4
- Size
  
  827KB
- MD5
  
  39172a4c3f5c0a3c2b9e12429b268bc0
- SHA1
  
  86c4970a1d27cc96e39aed4defecc6985c99438f
- SHA256
  
  e9766055710d099b014f7fbab8e001722e7a0d43e938f785a4a5128b4ad815c4
- SHA512
  
  a45892681c6cfb2f050c661219ff6cf134112d3b85ddfa0530e47ef72d885202b414709547ceec3f3bef3311b55a3b6b698742b95aa7a840544b169c29a9e388
- SSDEEP
  
  3072:8cs8/R3VAFOa4E/nl8tssSQuYJpzZp1act4cn/qR3VAFOa4yKqdw:8cs8ZZ7elcssF/5n0Z7y5dw
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing