288bc0faa4d89332c29551b80fc9829e7a7a68892b2c9fe5745dc27747305a1d | Triage

Sharing

General

Target

288bc0faa4d89332c29551b80fc9829e7a7a68892b2c9fe5745dc27747305a1d
Size

116KB
Sample

221126-c57v5sfd24
MD5

93225ef6f5b89526f0933365a7f1126c
SHA1

3ac1f77b654aadcb8ae1169484ebda42a4b7de6a
SHA256

288bc0faa4d89332c29551b80fc9829e7a7a68892b2c9fe5745dc27747305a1d
SHA512

a6f1f2c20a89d31b459096c8d2c7e1554e0689685b997b6ce1004267f3239f470841ffd09e767dba3b818a73835385f4d121ae7768ef28e8ed05396cd1253994
SSDEEP

1536:CPApoC7gY1idW2vo+wZkf0okxOtatzn8N48x9X795+22YfLL9+tH8C:CIpoC7gYRi8o4tz8N48x9X7Lh2OLI9

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  288bc0faa4d89332c29551b80fc9829e7a7a68892b2c9fe5745dc27747305a1d
- Size
  
  116KB
- MD5
  
  93225ef6f5b89526f0933365a7f1126c
- SHA1
  
  3ac1f77b654aadcb8ae1169484ebda42a4b7de6a
- SHA256
  
  288bc0faa4d89332c29551b80fc9829e7a7a68892b2c9fe5745dc27747305a1d
- SHA512
  
  a6f1f2c20a89d31b459096c8d2c7e1554e0689685b997b6ce1004267f3239f470841ffd09e767dba3b818a73835385f4d121ae7768ef28e8ed05396cd1253994
- SSDEEP
  
  1536:CPApoC7gY1idW2vo+wZkf0okxOtatzn8N48x9X795+22YfLL9+tH8C:CIpoC7gYRi8o4tz8N48x9X7Lh2OLI9
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing