b4393a47cc1a2537a69d8c085b4b21a121ec542f036189073b77cb2b0ca3d1de | Triage

Sharing

General

Target

b4393a47cc1a2537a69d8c085b4b21a121ec542f036189073b77cb2b0ca3d1de
Size

64KB
Sample

221121-k4hhvsgb5w
MD5

0374a1e69a244223bf8b704634279c40
SHA1

02e3f58a1d3131ba422e260e4b07498a563e7d3a
SHA256

b4393a47cc1a2537a69d8c085b4b21a121ec542f036189073b77cb2b0ca3d1de
SHA512

4a952a35ae3deb123fa0a6022fdfff01715ae8a0d71566576b64082b3289a79d3db26c9c990bb3b0fab1ee734cf2eb5cf62e7de1ee2a80085e94ae0d82a98401
SSDEEP

768:EknYgtFvqTOYqnow+F0gJCzA+gNVM2oA+czd7ZR/N4PQCc+7QN0h8BHq00:EkoxWoTWA+n2P+gZZv1Cc+7QN0Q

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  b4393a47cc1a2537a69d8c085b4b21a121ec542f036189073b77cb2b0ca3d1de
- Size
  
  64KB
- MD5
  
  0374a1e69a244223bf8b704634279c40
- SHA1
  
  02e3f58a1d3131ba422e260e4b07498a563e7d3a
- SHA256
  
  b4393a47cc1a2537a69d8c085b4b21a121ec542f036189073b77cb2b0ca3d1de
- SHA512
  
  4a952a35ae3deb123fa0a6022fdfff01715ae8a0d71566576b64082b3289a79d3db26c9c990bb3b0fab1ee734cf2eb5cf62e7de1ee2a80085e94ae0d82a98401
- SSDEEP
  
  768:EknYgtFvqTOYqnow+F0gJCzA+gNVM2oA+czd7ZR/N4PQCc+7QN0h8BHq00:EkoxWoTWA+n2P+gZZv1Cc+7QN0Q
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing