8a6c53adf0edd42f5f54261211bca67404df9ae6d1e69462ca84b50740cd6e70 | Triage

Sharing

General

Target

8a6c53adf0edd42f5f54261211bca67404df9ae6d1e69462ca84b50740cd6e70
Size

132KB
Sample

221121-hnfm8agb95
MD5

4fd92d51aad4d002615b08b22f7fbe40
SHA1

8068d784141bcac6d33466a4c941a9516f9ada29
SHA256

8a6c53adf0edd42f5f54261211bca67404df9ae6d1e69462ca84b50740cd6e70
SHA512

ab08f38faabf2574c36db9608d0cf48a0d34da417ea5fc86a0bf31d4525bf704a18ca801f2d1cbdeb929a935d9f81ba8ec771d2170a52511170a79d77d526525
SSDEEP

3072:2EtE23K8TWHsJra+MH2ajTzhZvpgY3B2l3m9:7jtrmnv+k2xm9

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  8a6c53adf0edd42f5f54261211bca67404df9ae6d1e69462ca84b50740cd6e70
- Size
  
  132KB
- MD5
  
  4fd92d51aad4d002615b08b22f7fbe40
- SHA1
  
  8068d784141bcac6d33466a4c941a9516f9ada29
- SHA256
  
  8a6c53adf0edd42f5f54261211bca67404df9ae6d1e69462ca84b50740cd6e70
- SHA512
  
  ab08f38faabf2574c36db9608d0cf48a0d34da417ea5fc86a0bf31d4525bf704a18ca801f2d1cbdeb929a935d9f81ba8ec771d2170a52511170a79d77d526525
- SSDEEP
  
  3072:2EtE23K8TWHsJra+MH2ajTzhZvpgY3B2l3m9:7jtrmnv+k2xm9
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing