2c4fb6bcdc67af6de04eb0320deb4a44c485a5e226818f7fd5f2f497f116057b | Triage

Sharing

General

Target

2c4fb6bcdc67af6de04eb0320deb4a44c485a5e226818f7fd5f2f497f116057b
Size

592KB
Sample

221121-l2y89shf4w
MD5

2dda42f3262c56f78ce61ec265eb5070
SHA1

d23f64693973fabc5149c6d947bdd59a48ac19b2
SHA256

2c4fb6bcdc67af6de04eb0320deb4a44c485a5e226818f7fd5f2f497f116057b
SHA512

7c445e6eff50eb023ec4de35cf4c5f91fd14252ab98b78726ca2bc9f97035995f1e6333015c5847b268cb53c087c95855a96e998d3b70693fa35b3128280f958
SSDEEP

12288:TDNt7MOc7+EoWPYhaYvoWfJrp3pkWJtbZU8JFtrymB:TDNt7MOa+xUnkFp3SKtb/JFwE

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  2c4fb6bcdc67af6de04eb0320deb4a44c485a5e226818f7fd5f2f497f116057b
- Size
  
  592KB
- MD5
  
  2dda42f3262c56f78ce61ec265eb5070
- SHA1
  
  d23f64693973fabc5149c6d947bdd59a48ac19b2
- SHA256
  
  2c4fb6bcdc67af6de04eb0320deb4a44c485a5e226818f7fd5f2f497f116057b
- SHA512
  
  7c445e6eff50eb023ec4de35cf4c5f91fd14252ab98b78726ca2bc9f97035995f1e6333015c5847b268cb53c087c95855a96e998d3b70693fa35b3128280f958
- SSDEEP
  
  12288:TDNt7MOc7+EoWPYhaYvoWfJrp3pkWJtbZU8JFtrymB:TDNt7MOa+xUnkFp3SKtb/JFwE
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing