ea4762845211c5d24e46954b2d39a886875290cdf3c6a3cbe858964f6064a862 | Triage

Sharing

General

Target

ea4762845211c5d24e46954b2d39a886875290cdf3c6a3cbe858964f6064a862
Size

317KB
Sample

221127-hb6c4sfc69
MD5

8a65999b1292138a17d0c40c97d2ebad
SHA1

0800a74540a2526fddf3bfb29a0d078050bc8af0
SHA256

ea4762845211c5d24e46954b2d39a886875290cdf3c6a3cbe858964f6064a862
SHA512

3abe19021695a4ef22a0ab3ef0c4f1407b4fe7c60625bd5aa904e6f7cfd71bc12e367feac67c39ccbf8fcbca387f11ccdc87849d46974b5404b4cac5694715e1
SSDEEP

6144:monCx4GBywyh0tgJkTVnsiD2NL0X98Dqo+KxqY/NwknQMN7IRxQH8k95EB:4mGsIgJkSSE0X98DIoqY/NwknQMN7IRl

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  ea4762845211c5d24e46954b2d39a886875290cdf3c6a3cbe858964f6064a862
- Size
  
  317KB
- MD5
  
  8a65999b1292138a17d0c40c97d2ebad
- SHA1
  
  0800a74540a2526fddf3bfb29a0d078050bc8af0
- SHA256
  
  ea4762845211c5d24e46954b2d39a886875290cdf3c6a3cbe858964f6064a862
- SHA512
  
  3abe19021695a4ef22a0ab3ef0c4f1407b4fe7c60625bd5aa904e6f7cfd71bc12e367feac67c39ccbf8fcbca387f11ccdc87849d46974b5404b4cac5694715e1
- SSDEEP
  
  6144:monCx4GBywyh0tgJkTVnsiD2NL0X98Dqo+KxqY/NwknQMN7IRxQH8k95EB:4mGsIgJkSSE0X98DIoqY/NwknQMN7IRl
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing