736f58a24ad197b0b34f8a9e0d13daca40f2ef5821fd57c40ec629a462b67deb | Triage

Sharing

General

Target

736f58a24ad197b0b34f8a9e0d13daca40f2ef5821fd57c40ec629a462b67deb
Size

265KB
Sample

221121-hwfm7acd4v
MD5

08b484b43c57358eaaac80bec35d3710
SHA1

7ce56d366f152fe285593cd0226e916e2589de3f
SHA256

736f58a24ad197b0b34f8a9e0d13daca40f2ef5821fd57c40ec629a462b67deb
SHA512

787710d69579150274616c5ec7a1b3a6632e804c6a6a835d1cec54e9e7037f7be3fe9be630b9192c8fa700ce108d00c6218c644d211cff3a90cb53c33681c90e
SSDEEP

6144:StuOZ9eBen/Zbt5dGH0M3kPnOhOcLctch1v9hc0cr/:St3eBen/Zbt5dGH0eHhstcPc04

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  736f58a24ad197b0b34f8a9e0d13daca40f2ef5821fd57c40ec629a462b67deb
- Size
  
  265KB
- MD5
  
  08b484b43c57358eaaac80bec35d3710
- SHA1
  
  7ce56d366f152fe285593cd0226e916e2589de3f
- SHA256
  
  736f58a24ad197b0b34f8a9e0d13daca40f2ef5821fd57c40ec629a462b67deb
- SHA512
  
  787710d69579150274616c5ec7a1b3a6632e804c6a6a835d1cec54e9e7037f7be3fe9be630b9192c8fa700ce108d00c6218c644d211cff3a90cb53c33681c90e
- SSDEEP
  
  6144:StuOZ9eBen/Zbt5dGH0M3kPnOhOcLctch1v9hc0cr/:St3eBen/Zbt5dGH0eHhstcPc04
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing