900693381476e6f5292627075b059a17e7e02c1a0aea86e7482816848e5cb7c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

900693381476e6f5292627075b059a17e7e02c1a0aea86e7482816848e5cb7c9
Size

330KB
Sample

221201-z4js9aca39
MD5

cf60cf01ee6879e59b076e37c79f7ec9
SHA1

4307082bbfcc64a2559d325d054ca69686adefd3
SHA256

900693381476e6f5292627075b059a17e7e02c1a0aea86e7482816848e5cb7c9
SHA512

486f50ad7d115b787d83f6e61eea5006e83fd9a086c20645b38cd4224202a930e450522f8f38d97650bb77e2d6db9f65950b73de86205304fef89f1cad3003ff
SSDEEP

768:QTVtEgTYbj7nNdZaDUH3PuaxyuBGPYwt7zmwXtMZjAkMXYL77AdExbdIC5nM8ET:EYTw2YfHR9YAzXHULGn3q

Score

6^/10

microsoft persistence phishing

Malware Config

Targets

- Target
  
  900693381476e6f5292627075b059a17e7e02c1a0aea86e7482816848e5cb7c9
- Size
  
  330KB
- MD5
  
  cf60cf01ee6879e59b076e37c79f7ec9
- SHA1
  
  4307082bbfcc64a2559d325d054ca69686adefd3
- SHA256
  
  900693381476e6f5292627075b059a17e7e02c1a0aea86e7482816848e5cb7c9
- SHA512
  
  486f50ad7d115b787d83f6e61eea5006e83fd9a086c20645b38cd4224202a930e450522f8f38d97650bb77e2d6db9f65950b73de86205304fef89f1cad3003ff
- SSDEEP
  
  768:QTVtEgTYbj7nNdZaDUH3PuaxyuBGPYwt7zmwXtMZjAkMXYL77AdExbdIC5nM8ET:EYTw2YfHR9YAzXHULGn3q
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishing