0f0adbaccb8740eb05859efab260672b235e543e347708a143eb19f045219cd0 | Triage

Sharing

General

Target

0f0adbaccb8740eb05859efab260672b235e543e347708a143eb19f045219cd0
Size

293KB
Sample

221123-ykcedsdc7s
MD5

eb05ed60bfce193503dd6c3cab99b6d2
SHA1

be3fc84c2e6d8989fbef172e57aae9b14ad9bed9
SHA256

0f0adbaccb8740eb05859efab260672b235e543e347708a143eb19f045219cd0
SHA512

1ba26130793a975adf62ca2be423c497668d7795c35dd7e396bb54ab80b69f142eacdd94d59f41f13337237901ad74dad9f0b2a20de6c3a2af26852d752817fd
SSDEEP

6144:B6d1+RiD9NMs48VHmK8C4xDdZYNvXE7dFiteOv:BaY4pNMsfV2CMJKYs

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  0f0adbaccb8740eb05859efab260672b235e543e347708a143eb19f045219cd0
- Size
  
  293KB
- MD5
  
  eb05ed60bfce193503dd6c3cab99b6d2
- SHA1
  
  be3fc84c2e6d8989fbef172e57aae9b14ad9bed9
- SHA256
  
  0f0adbaccb8740eb05859efab260672b235e543e347708a143eb19f045219cd0
- SHA512
  
  1ba26130793a975adf62ca2be423c497668d7795c35dd7e396bb54ab80b69f142eacdd94d59f41f13337237901ad74dad9f0b2a20de6c3a2af26852d752817fd
- SSDEEP
  
  6144:B6d1+RiD9NMs48VHmK8C4xDdZYNvXE7dFiteOv:BaY4pNMsfV2CMJKYs
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing