b106f6c78f7cf02b58cd6eb249053da03b616e58fdafe22fc2759086830e8435 | Triage

Sharing

General

Target

b106f6c78f7cf02b58cd6eb249053da03b616e58fdafe22fc2759086830e8435
Size

100KB
Sample

221123-wt4twsda44
MD5

5d959f02d9c328e8301ebe7d4ba1ba10
SHA1

6fb8d1184940c502f2d39a1e2fa35a567c882312
SHA256

b106f6c78f7cf02b58cd6eb249053da03b616e58fdafe22fc2759086830e8435
SHA512

98f52f6cf358a3c3120c9b376b8c40251672b95092ce05d9c24dd05e80219eeae33495120da209e07dc548adb44f01d9ff204873f0d4468e383ac27605a9fc6f
SSDEEP

1536:XWpPwVGJp/Ews4CEbid/aaFEfq6uqOAZyo175MGHP0fodMrFkLw:mpPwVGJp/ZCEed/oyo17W+wodSy

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  b106f6c78f7cf02b58cd6eb249053da03b616e58fdafe22fc2759086830e8435
- Size
  
  100KB
- MD5
  
  5d959f02d9c328e8301ebe7d4ba1ba10
- SHA1
  
  6fb8d1184940c502f2d39a1e2fa35a567c882312
- SHA256
  
  b106f6c78f7cf02b58cd6eb249053da03b616e58fdafe22fc2759086830e8435
- SHA512
  
  98f52f6cf358a3c3120c9b376b8c40251672b95092ce05d9c24dd05e80219eeae33495120da209e07dc548adb44f01d9ff204873f0d4468e383ac27605a9fc6f
- SSDEEP
  
  1536:XWpPwVGJp/Ews4CEbid/aaFEfq6uqOAZyo175MGHP0fodMrFkLw:mpPwVGJp/ZCEed/oyo17W+wodSy
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing