Overview

overview

7

Static

static

8ac3e1817b...f3.exe

windows7-x64

6

8ac3e1817b...f3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ac3e1817b32e2be75d54619b456911f915168af28e9f2e41935c44a92d7b5f3

  • Size

    72KB

  • Sample

    221128-ecth6age9z

  • MD5

    77d22b7e0a9a1fff4a7273bfe4321429

  • SHA1

    45c31bc66f81cdd191324d135b4745bade9503b6

  • SHA256

    8ac3e1817b32e2be75d54619b456911f915168af28e9f2e41935c44a92d7b5f3

  • SHA512

    ed5881825ca455b153839d73f50300f3adc14983a04bda2ce5e56283c010f96a7b0aab2c1acfb7716369c99e6649dc2f25a231a3275153696b4146f678e4902c

  • SSDEEP

    768:xvfnFrjhZ5xYaIY8bEM9ChqGOmyHKS2c7nWsDfSSg7wjobPcFTf3b6N44444jU:x3N5jMIqGOa8qsWt7GMPMTf3b6t

Score
7/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      8ac3e1817b32e2be75d54619b456911f915168af28e9f2e41935c44a92d7b5f3

    • Size

      72KB

    • MD5

      77d22b7e0a9a1fff4a7273bfe4321429

    • SHA1

      45c31bc66f81cdd191324d135b4745bade9503b6

    • SHA256

      8ac3e1817b32e2be75d54619b456911f915168af28e9f2e41935c44a92d7b5f3

    • SHA512

      ed5881825ca455b153839d73f50300f3adc14983a04bda2ce5e56283c010f96a7b0aab2c1acfb7716369c99e6649dc2f25a231a3275153696b4146f678e4902c

    • SSDEEP

      768:xvfnFrjhZ5xYaIY8bEM9ChqGOmyHKS2c7nWsDfSSg7wjobPcFTf3b6N44444jU:x3N5jMIqGOa8qsWt7GMPMTf3b6t

    Score
    7/10
    persistencemicrosoftphishing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks