Overview

overview

6

Static

static

5

75cacf05bc...de.exe

windows7-x64

5

75cacf05bc...de.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75cacf05bc521df56fab4fc60fcb4acedf5b8245b817d180f9fe8251b4e746de

  • Size

    1.0MB

  • Sample

    221126-adkv7age73

  • MD5

    48374eaeed5a8135eb2a9c51888123af

  • SHA1

    477877d867bae864e8dcc241a19b4f756279670a

  • SHA256

    75cacf05bc521df56fab4fc60fcb4acedf5b8245b817d180f9fe8251b4e746de

  • SHA512

    ef5d1b7723b8fd122f5f67f07e4688a3c13fca3c031f5e1ccb152035374d211a6d763a3796c8c6a63a78b6167b5498511606801a00a46100122a7f04cc7ae50a

  • SSDEEP

    24576:Qc936BzWF4GH0W4Xj3rK84mgLaLFpxG6/DgaHihsO:n68F4GH+z94xLaLFS6/sYO

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      75cacf05bc521df56fab4fc60fcb4acedf5b8245b817d180f9fe8251b4e746de

    • Size

      1.0MB

    • MD5

      48374eaeed5a8135eb2a9c51888123af

    • SHA1

      477877d867bae864e8dcc241a19b4f756279670a

    • SHA256

      75cacf05bc521df56fab4fc60fcb4acedf5b8245b817d180f9fe8251b4e746de

    • SHA512

      ef5d1b7723b8fd122f5f67f07e4688a3c13fca3c031f5e1ccb152035374d211a6d763a3796c8c6a63a78b6167b5498511606801a00a46100122a7f04cc7ae50a

    • SSDEEP

      24576:Qc936BzWF4GH0W4Xj3rK84mgLaLFpxG6/DgaHihsO:n68F4GH+z94xLaLFS6/sYO

    Score
    6/10
    microsoftpersistencephishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks