be9784b5a065ada6d151290e2074331e0b8a0b5637c6b23e04df339ef57c62cb | Triage

Sharing

General

Target

be9784b5a065ada6d151290e2074331e0b8a0b5637c6b23e04df339ef57c62cb
Size

1017KB
Sample

221129-h9f6wagg95
MD5

5e0c4c5bcc27c14a09b778cc846f01fb
SHA1

672d40330ba07297e5ba5880b46eed23c0dee43f
SHA256

be9784b5a065ada6d151290e2074331e0b8a0b5637c6b23e04df339ef57c62cb
SHA512

36ad16242f5a69d2c6670611447f29e95ed206aa3a7f4535e4bc052b4ae0e6a888936acb8d834dbdad66a6ce6d1cefa7a02bd70396ac8ee1059d5127edb7a67e
SSDEEP

12288:8yELQDEI04EAihYHfX6c3pW0MIVAEeAgsQ+GyQv9L1e:RELQpY3c3pW0P6Eer+wl0

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  be9784b5a065ada6d151290e2074331e0b8a0b5637c6b23e04df339ef57c62cb
- Size
  
  1017KB
- MD5
  
  5e0c4c5bcc27c14a09b778cc846f01fb
- SHA1
  
  672d40330ba07297e5ba5880b46eed23c0dee43f
- SHA256
  
  be9784b5a065ada6d151290e2074331e0b8a0b5637c6b23e04df339ef57c62cb
- SHA512
  
  36ad16242f5a69d2c6670611447f29e95ed206aa3a7f4535e4bc052b4ae0e6a888936acb8d834dbdad66a6ce6d1cefa7a02bd70396ac8ee1059d5127edb7a67e
- SSDEEP
  
  12288:8yELQDEI04EAihYHfX6c3pW0MIVAEeAgsQ+GyQv9L1e:RELQpY3c3pW0P6Eer+wl0
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing