7a6c7eee119e26558897c9f601ae324954e35a990e8325b80f80f6b44ce4694d | Triage

Sharing

General

Target

7a6c7eee119e26558897c9f601ae324954e35a990e8325b80f80f6b44ce4694d
Size

162KB
Sample

221130-gcxxpaeg2y
MD5

ec392d34e3e1090e45af69c57a332ee5
SHA1

39c988756b9b2f312c486ec81ccf9c946f9a400d
SHA256

7a6c7eee119e26558897c9f601ae324954e35a990e8325b80f80f6b44ce4694d
SHA512

5ff553f2e9513a9a95146dd50cd1a39514029302e800037e2c6646d1becb35c79a099716b3015e4cfd6db00b26bcabe5a8fb5dbd700e258a5e1ffd325eb564b1
SSDEEP

1536:QdvAwz9UKFCBy2uvl/0yB+BwU0yHp3JJWKucqqUbAb5k4Kt2ueJuTyC2QpjR+:QdowRd6mF0yQBVdJxPUUbWbt2L828F+

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  7a6c7eee119e26558897c9f601ae324954e35a990e8325b80f80f6b44ce4694d
- Size
  
  162KB
- MD5
  
  ec392d34e3e1090e45af69c57a332ee5
- SHA1
  
  39c988756b9b2f312c486ec81ccf9c946f9a400d
- SHA256
  
  7a6c7eee119e26558897c9f601ae324954e35a990e8325b80f80f6b44ce4694d
- SHA512
  
  5ff553f2e9513a9a95146dd50cd1a39514029302e800037e2c6646d1becb35c79a099716b3015e4cfd6db00b26bcabe5a8fb5dbd700e258a5e1ffd325eb564b1
- SSDEEP
  
  1536:QdvAwz9UKFCBy2uvl/0yB+BwU0yHp3JJWKucqqUbAb5k4Kt2ueJuTyC2QpjR+:QdowRd6mF0yQBVdJxPUUbWbt2L828F+
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing